Slashdot Log In
Cybercrime Now Worth $105 Billion, Bypasses Drug Trade
Posted by
Zonk
on Tue Sep 18, 2007 10:40 PM
from the and-your-mom-said-computers-would-never-be-important dept.
from the and-your-mom-said-computers-would-never-be-important dept.
Stony Stevenson writes "Citing recent highly publicized corporate data breaches that have beset major companies like Ameritrade, Citigroup, and Bank of America, McAfee CEO David DeWalt, said that cyber-crime has become a US$105 billion business that now surpasses the value of the illegal drug trade worldwide. Despite the increase in government compliance requirements and the proliferation of security tools, companies continue to underestimate the threat from phishing, data loss, and other cyber vulnerabilities, DeWalt said. 'Worldwide data losses now represent US$40 billion in losses to affected companies and individuals each year, DeWalt says. But law enforcement's ability to find, prosecute, and punish criminals in cyberspace has not kept up: "If you rob a 7-11 you'll get a much harsher punishment than if you stole millions online," DeWal remarked. "The cross-border sophistication in tracking and arresting cyber-criminals is just not there."'"
Related Stories
[+]
Technology: NSA Tasked With 'Policing' Government Networks 93 comments
Novus Ordo Seclorum writes "The NSA has a new assignment. No longer merely responsible for signals intelligence, the NSA now has the task of defending against cyber attacks on government and private networks. 'The plan calls for the NSA to work with the Department of Homeland Security and other federal agencies to monitor such networks to prevent unauthorized intrusion, according to those with knowledge of what is known internally as the 'Cyber Initiative.' Details of the project are highly classified. Director of National Intelligence Mike McConnell, a former NSA chief, is coordinating the initiative. It will be run by the Department of Homeland Security, which has primary responsibility for protecting domestic infrastructure, including the Internet, current and former officials said. At the outset, up to 2,000 people -- from the Department of Homeland Security, the NSA and other agencies -- could be assigned to the initiative, said a senior intelligence official who spoke on condition of anonymity.'"
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
McAfee? (Score:5, Insightful)
Bypasses drug trade? (Score:4, Insightful)
Surpass: To be or go beyond, as in degree or quality; exceed.
Parent
Re: (Score:2)
Sounds scary (Score:5, Funny)
Does O'Reilly or Manning have a book on how to become a cybercriminal? Besides the Camel, I mean.
It is scary. AV coordination is suspicious though (Score:5, Informative)
The BBC has a nice write up [slashdot.org] on how open and inviting the world of cybercrime is. Tools are passed around and improved and auctioned along with the results, according to William Beer, of Symantec. The scene is booming, with almost double the number of new threats in the first six months of 2007 as in the last of 2006.
Arbor Networks is reporting the same boom from the ISP perspective [slashdot.org], and thinks the infrastructure of the internet itself is in danger.
Darkreading [slashdot.org] details some of the sophistication of the attacks, from an IT perspective as reported by MessageLabs.
Hmmm. Symantec, MessageLabs, McAffe, all at once reporting the same thing. Not to downplay the threat, but is a new version of Windows out?
Parent
Re: (Score:3, Interesting)
Yes, thankfully. It's been out for 8 months, it has twice [hitslink.com] the market share of Linux and OS X combined, and it's much more secure than the one it's replacing.
BTW, I think it's funny that you'd give so much weight to companies that you've referred to in the past as "snake oil vendors".
Given the fact that the vast majority of computers on botnets are there because of user action instead of exploited vulnerabilities, I fail to see what a new
Now expect (Score:3, Interesting)
Too bad the CIA can't destroy the black urban population of America with phishing spam, like they did to the brothers ad sisters with drugs in the 70's and 80's.
Maybe this isn't true (Score:3, Insightful)
Re:Maybe this isn't true (Score:5, Funny)
Parent
Uhhh, wtf? (Score:5, Insightful)
What an idiot.
Re: (Score:2, Insightful)
Re: (Score:2, Insightful)
As much as I believe those responsible for the Enron disaster are a danger to society, they can be neutralized simply by prohibiting them from being directors of companies ever again.
Re: (Score:2, Informative)
There is a bit more to it than that. In all countries there is a retributive element in the justice system, i.e. making the punishment proportional to the severity of the crime. If your statement were true, anyone who commits a crime and can show that they are not able to commit that crime again should just be let go.
Re: (Score:2, Insightful)
Re:Uhhh, wtf? (Score:5, Insightful)
If I had some way to push a button and take one dollar from every American in the country, with a 5% chance of getting caught and no penalty besides losing the money I'd gained, I'd honestly probably push it. If the penalty was instead 80 years in prison, I wouldn't. Penalties are important.
Parent
Re: (Score:2)
Re: (Score:3, Informative)
Robbery isn't necessarily violent
Huh? Then it's not robbery.
although he probably should have used home burglary as a better example
You're suggesting that burglary is the same thing as robbery?
Ok...
It does seem ridiculous that "white collar" crimes are less penalized since any one case typically affects many more people than any one burglary.
Larceny, whether committed via burglary or fraud or hacking carries the same penalty, determined by the value of the goods stolen. Burglary may carry other penalties, like trespass, or entering a domicile while the occupants are home, or damaging the property.. but that's just co-incidental.
Re: (Score:2)
Re: (Score:2)
What if shifting numbers results in a riot or suicide ?
Say if, someone "shifts some numbers" on the stock market, an investor loses everything he has because of this shift & hangs himself, could that be considered violent crime ?
What if someone alters a news release on a company website to artificially decrease the value of that companies stock & it causes a riot ?
Cybercri
Re: (Score:2)
yah.
Re: (Score:3, Insightful)
If you want a real challenge, try to figure out exactly how much emotional pain and depression is equivalent to one murder.
This number (Score:5, Insightful)
Re:This number (Score:5, Insightful)
Everyone knows those cyber-terrorists are building weapons of mass destruction. You are either with us or against us, you liberal cyber-terrorist facilitator...
You know, the scary thing is it's almost not even funny anymore.
Parent
Re: (Score:2, Funny)
Oh, the "war on cybercrime" is just a campaign slogan away from reality. Are you ready for random searches of your hard drive? With my luck, a random search of my hard drive would reveal trace amounts of cocaine.
How to make a number up (Score:2)
If the RIAA are involved in creating the stats, then they're probably using their $750 per track damages. If MS does the same thing for pirated versions of Office (probably $10000 per copy) etc, then just the piracy part of cybercrime would add up pretty quickly.
Bottom line: This sounds like a number that has been created to support some proposed course of action.
Re:How to make a number up (Score:5, Funny)
They're including sales of Windows Vista. If releasing that thing to the market isn't a crime, I don't know what is.
(Ba dump bump.)
Parent
Re:This number (Score:5, Interesting)
Parent
Shift emphasis (Score:5, Insightful)
Re: (Score:2)
Yeah, but you know their solution is to just trump up a third never-ending war. In addition to the "war on drugs" and the "war on terror", we'll have the "war on netcrime" which will result in nothing less than an increase in the rate of usurpation of powers by the Federal government.
Re:Shift emphasis (Score:4, Funny)
We could probably make this easier by just call them all "the war on freedom".
Parent
Re: (Score:3, Funny)
Only on Slashdot..
Punishments... (Score:2)
Like... distributing a mp3 on a P2P network?
This must mean... (Score:5, Funny)
Maybe we'd better start a war on cyber crime too, seeing how the drug war has been so successful!
Drugs vs Cybercrime (Score:5, Insightful)
Pushing ones and zeros are safer than pushing dope. No wonder organized crime has delved into the digital world.
The Courts (Score:5, Insightful)
I agree that cybercrime is a huge problem (although I don't buy that it's more of a problem than illegal drug trade). At the very least, it is a crime on a lesser level because no one is placed in danger of physical harm through it's effects.
Cybercrime, as well as other crimes, should be punished according to the level of damage caused.
With that in mind, the current US court systems cannot seem to wrap their heads around the tactics and ideas put forth in the discovery period of civil copyright cases. There is a common misunderstanding or complete lack of understanding on the part of most of society in the ways of computers and networking.
At this point, I doubt very seriously that most of the accused and prosecutors have the knowledge or ability to fairly fight a cybercrime court case.
In physical, there is always some level of evidence present to tie a suspect to the crime. In the land of computers, it's much more difficult to do so. Where a physical bank robber can wear a mask or clothing to conceal identifying aspects of his physical person. But there remains at the scene hairs, fibers, eyewitness accounts, surveillance tapes and other evidence that helps to narrow down the criminal.
With cybercrime, the 'break-in' can happen from thousands of miles away without the perpetrator ever setting foot, or having ever previously set foot on the premises. There is no physical description, no chemical or biological evidence left behind. The attack could come from a public terminal at a library, or even someone's open (or hijacked) wireless access point. Through the use of zombie computers, the attack could come from my mother's computer.
How can we expect to catch, let alone prosecute cybercriminals without special law enforcement and prosecution/defense attorneys and judges capable of fairly trying people like my mother or the guy who used her computer to break into the Bank of America system?
Re: (Score:2)
The money has to go SOMEWHERE, otherwise there's no point. Follow the money.
Re: (Score:2)
What about in a case where no money is stolen, but rather credit card numbers and SSNs?
Likely the person who makes use of that information is not the same person who stole it. Even if that's the case, how many different places can you go to swipe someone's name, SSN and even DOB? Until recent years, universities used SSNs as student ID numbers.
If money goes from account A to account B, sure follow the money. When bits and bytes with no direct monetary value goes missing from one place, who's to say th
Re: (Score:2)
>a crime on a lesser level because no one is placed in danger of physical harm through it's effects.
That is faulty reasoning. You are thinking that dealing drugs is worse than theft because the "damage done" is worse (at least with harder drugs like cocaine and heroin). However, you aren't considering *responsibility*.
If a free person does something to harm themselves, it is no crime. It is just foolish and being
Fabricated Numbers (Score:5, Insightful)
Drug numbers are *real* numbers. They still may not be accurate, but at least they represent the summation of finite transactions - like the global automobile trade, or the global whale oil trade. It is a sales number.
Cyber crime is a 'damages' number. Like the woman that spilled hot coffee on her leg and sued McDonalds for several million dollars in 'damages'... and at least she had a specific amount of damages ruled in her favor. The trumped up cyber-crime numbers... along with the RIAA numbers... are just manufactured because it is handy to provide very large numbers if you are on the side of the people producing the numbers.
What I would like to see is how many $$s were actually phished last year? How much did the Nigerians actually rake in by claiming to be my/your/her/his brother in law or trusted barrister?
Re: (Score:2)
I don't want to belittle the impact of cyber-crime, but this $105 Billion number is just fabricated to make the problem look large.
I'm leaning in that direction also... Especially because of something in TFA.
... Worldwide data losses now represent US$40 billion in losses to affected companies and individuals each year"
"[McAfee CEO] DeWalt said that cyber-crime has become a US$105 billion business
So are they really saying that cybercrime is a $65 billion business with $40 billion in collateral damages?
If that's how they're playing the numbers, then you can easily jack up the cost to society of drugs, just add in hospital bills, lost w
Here's Another Reason: Cybercrime Pays (Score:5, Interesting)
Compare this to cybercrime. I have been, at points in the past, a spam researcher. At the time, I lurked in spammer forums to get an idea of what the enemy is thinking. Ignoring the "I make a million a month and own a fleet of cars and a harem" boasting, and just focusing on the deals that were offered and consumated there, it is clear that cybercrime makes Serious Money especially by the standards of the locales where some criminals hang out. A single script to clean a spam mailing list, which is what, two or three hours of work, costs about a month worth of a legit Russian programmer's wages.
Or take a look at the opportunities for low-level criminals in the US, like "cashers". A casher is the guy at the end of the identity theft chain who gets the only risky job: turning the swiped data into money. (Phisher turns credentials over to casher, casher gets money, pays phisher.) He has a non-zero chance of his photo ending up on camera. For this, he gets perhaps 35% of the take from the scam. 35% of the banking account of say a lower-middle class family is easily thousands of dollars. No drugs in your pocket, no guns in your face, and no dedicated squad of police officers busting into your apartment at 1:00 in the morning if you get sold out by a buddy.
Why would you sell drugs if you weren't using, given these risk-vs-reward scenarios?
Bypasses? (Score:2, Insightful)
Forgive me for being an English Nazi but jeez Louise, have they now outsourced Slashdot editing to people who don't speak English?
Snark (Score:5, Funny)
"Thank you for your correspondence dated 17 May 2001, 22 January 2002, 8 July 2004, 14 March 2006, and 19 September 2007, requesting that the Federal Bureau of Investigation enforce existing wire fraud statutes with at least the same vigor with which we enforce non-violent drug posession statutes. Upon review, we regret to inform you that your requests to date were not of the form required by this authority.
"Please re-submit your request according to the traditionally established procedure. The most recent edition of this procedure may be obtained from the office of Senator Ted Stevens (R-AK). Your request may be filed at any Republican party field office. Please enclose with your request a cashier's check made payable to the Republican National Committee in the sum of no less than fifteen million (15,000,000) US dollars or equivalent sum in easily-convertible currency excepting Euros. Please do not enclose cash.
"We pride ourselves on providing our customers the best and most convenient law enforcement service possible, and look forward to receiving your request."
Surpasses US market, not global (Score:3, Informative)
How do you divide 105 B$ ? (Score:3, Funny)
x B$ stolen from e-mail users who have to work through deluges of spam
x B$ stolen from drug companies by thieves who sell illegal generics online
x B$ stolen from software vendors by digital-high-seas pirates
x B$ stolen from the RIAA and the MPAA by the common man who won't pay retail price
x B$ stolen from bookstores by project Gutenberg
x B$ stolen from encyclopedia makers by Wikipedia users
x B$ stolen from McAfee and other security vendors by Linux and OS X users
x B$ stolen from buggy-whip makers by car drivers
McAfee is here to help: your computer will be safe from all these cyber-crime enablers.
Not True (Score:2, Informative)
ugh (Score:2)
A) Pulling numbers out of ass.
It's crime. Criminals don't pay taxes. Where did this revenue estimate come from? Surely not from the IRS or the criminals' accounting department.
B) Playing the victim card.
The "victims" of "cybercrime" are almost always entirely at fault due to gross negligence. We shouldn't cry for people (or businesses) that cause themselves harm... especially if the "crime" involves losing a laptop filled with private data.
C) Trying to present something old as new.
It's not theft, i
Drug Dealers (Score:3, Funny)
Imagine IRC channels dedicated to the drug trade!
Short memory? (Score:4, Insightful)
Do we ever learn?
Re:Penalties are not that much lower (Score:4, Funny)
That Conrad Black will be facing a real "three strikes" kind of deal!
Parent