Online Crime Seen as Growing Threat to Business, Politics

BobB passed us a link to a NetworkWorld article, exploring the ongoing realization in business circles of the dangers online criminals pose. The piece raises the possibility that criminal elements are gaining access to US research labs in an effort to ferret out corporate and governmental information. One institute referred to in the article states: "Economic espionage will be increasingly common as nation-states use cyber theft of data to gain economic advantage in multinational deals. The attack of choice involves targeted spear phishing with attachments, using well-researched social engineering methods to make the victim believe that an attachment comes from a trusted source." We just recently discussed possible hacker involvement in several municipal blackouts.

More powerful organized crime

[JavaRob]

The morons that put critical data / control on outward facing servers deserve the hosing they get. [...] I am more concerned about who they give physical access to the data / hardware are. All it takes is one vengeful employee and a thumb drive to lose very sensitive data.

These are both examples where there's at least something individual companies can do about it internally.

Personally, I was extremely unsettled a few years ago when the spammer powers-that-be decided they wanted BlueSecurity shut down [washingtonpost.com], and a bunch of DNS servers, Tucows and 4 other hosting providers, and SixApart/LiveJournal/TypePad [wired.com] fell as collateral damage.

Is that not *scarier* for business? Let's see -- I'm free to conduct my business... as long as I don't step on any toes in the organized crime world. 'Cause if I do, they're shutting me down whenever they feel like it, and there's not a damned thing I (or the supposed "protection" of the law) can do about it.

And of course, no power, once it exists, goes unused for very long. I see more and more stories about botnets used for extortion -- which is a bit trickier to carry out, since it's tough to get paid without a money trail, and law enforcement has more experience dealing with that -- but it's just another example. If they just want to squelch my business, it's incredibly easy.

[Addendum: oh look... the article points to cyber espionage as #3 in the SANS institute's top 10 threats of 2008 [sans.org]; botnets are #2]