Slashdot Mirror
Cybercrime Organizational Structures Evolve
An anonymous reader writes "The latest findings of a report explore the trend of loosely organized clusters of attackers trading stolen data online being replaced by hierarchical cybercrime organizations. These organizations deploy sophisticated pricing models, crimeware business models refined for optimal operation, crimeware drop zones, and campaigns for optimal distribution of the crimeware. These cybercrime organizations consist of strict hierarchies, in which each cybercriminal is rewarded according to his position and task."
They must be intelligently designed! ;-)
The Sopr0nos.
Hierarchial organizations are much easier to attack.
Tic-Tac-Toe, Global Thermonuclear War, and relationships all have the same winning move.
Are they going to start sending notifications of their organizational change through spam, just like my current corporate VPs like to do through e-mail?
"The organization changes announced by Boris Brezgnoff represent a positive signal to all of our stakeholder groups - investors, clients and especially zombie PC owners - that we are repositioning our african operations to pursue accelerated growth. These changes will facilitate the cross-pollination of expertise we have developed across Nigeria. These changes will also enable further refinement of our global delivery strategy as we increase intra- and inter-business unit communication and pursue cross-business unit opportunities.
To deliver on this strategy and in recognition of their contribution to our past growth, the following leadership changes will be effective as of July 15, 2008:
Ivan Lebovich will assume the position of DDOS Extortion Vice President, Southern Hemisphere. Ivan's deep understanding of all of our services - particularly our Tier 2 and Tier 3 business - and his ability to develop strong relationships with key accounts will help expand our penetration of clients based in the southern hemisphere. His passion for the global delivery of our IT services and his excellent ongoing relationship with our primary nearshore USDS (Untraceable Spam Delivery System) accounts - South Africa and Malaysia - ensures the effective management of this critical delivery centre. I personally want to thank Ivan for his many years of dedicated service to the FIRM (Free Internet Russian Mafia) and look forward to working with him as he takes on this promotion to business unit leader."
-- Home is where you eat your heart out.
And kneecapped, obviously.
Ok buddy, this is how it's going to work. You're going to pay us 10% of the profits you get off your google ads. What we're going to do for you is make sure that no one else is out there pushing in on your corner of the market. We'll even set up a bunch of other sites that refer people to your site to increase your business.
If you don't pay up, we'll vandalize your page, buy your domain out from under you and unplug your server.
Now I know why I don't generally bother reading these articles. This one has to be one of most cursory and pointless articles I have read in a long long time.
Vetinari recognized that crime was inevitable. But if you were going to have crime, make it organized crime. I believe there was a point where Vetinari made the thief's Guild realize that instead of fighting over a slice of the pie to make more money, take a reasonable slice, and then make the pie bigger. Sound like life imitating art.
If only we could fall into a woman's arms without falling into her hands
First, it's important to clarify that as far as I'm aware, we're not in the business of compromising networks or gaining access to other systems without just cause. When there is a clear threat to security, we then employ legal and just means to deal with that threat. Also, I'm not able to discuss specific methods that we might or might not be employing but only speak in terms of concepts and capabilities that we should have in order to be successful conducting operations in cyberspace. If you have insights and skills that might broaden our capabilities in this arena, I encourage you to consider joining the emerging FIRM cyber-workforce.
YT
Boris Brezgnoff
"Kill 'em all and let Root sort 'em out"
Same shite
warez, organized crime, terrorists, all the same evil mindset
Anyone remember the more professional warez groups in the 90s?
President - (Coordinates 0day with asian pirate houses)
VP - (Gets new games, manages crackers)
VP - (Handles distribution, manages couriers and ftp sites)
Crackers - (Remove copy protection )
Couriers - (Package game in group format, shuttle payloads to various sites)
Distro Site Admins - (Administer high-bandwitdth ftp sites)
Various dead drop sites, various payment structures, huge channel of buyers/resellers, etc. etc.
casino ddos extortion pack mini: $5,000
extra annoyment (100% cpu) for zombie computer owners: +$20
tarpit iptables rule workaround: +$30
24/7 phone support: +$300
lunch with PharmaMaster: $5m
So why are the officials surprised? The structures that fight the crime become more organized so it is expected for the latter to do the same. Cause and effect.
How do you level up?
It never ceases to amaze me that even the lowest of the low scumbag criminals can form crime rings and organize into a hierarchical management structure.
And it's always been that way.
The booze runners of the 20's and 30's to the crack dealers of the 80's, and everything before and after.
They have pretty much corporate org charts.
I guess it's human nature to follow the rules/leader. Some just choose different sides of the law.
Shameless plug alert: Game server control panel
The study of crack dealers mentioned in Freakonomics showed a heirarchy similar to any US corporation, with the lowest level getting about the same hourly rate as in McDonalds. There really is no hard and fast line between organised business and crime, just degrees of criminality ranging from (say) welfare friendly food providers on the West Coats down to crack dealers. As Enron and Bear Sterns have shown us, size and visibility is no guarantee of legality.
From scarped cliff or quarried stone she cries "A thousand types are gone, I care for nothing, no not one."
Does anyone remember Introversion's little hacker game, Uplink?
You worked as a (mostly malicious) contract hacker for a corp called Uplink, creating and editing identities for clients, stealing and deleting data, and transferring large sums of money in exchange for a bounty proportional to the difficulty/danger of being caught.
Looks very similar to this situation.
Just checked - you can still buy Uplink on Steam for $10.
Aside from people's general comments that this is both obvious and many other people have already presented this type of information before I think their assessment is inaccurate. First of all their numbers make it obvious that they are only monitoring semi-open forums and not completely closed ones. Additionally their data looks like it is US and Russia-centric, not focusing on the numerous markets that exist in Ukraine, Bulgaria, Romania, Poland, western Africa and South America. Plus overall they are mixing up organized crime and specialization. What they are describing is mature capitalization with job specialization moreso than organized crime. They are limiting themselves to groups where amateur data thieves require specialists to perform higher risk elements of cashing out, using the stolen data. The real elements of organized crime are the ones where traditional non-cyber groups hire computer experts to get data, and move money through traditional, well-established means. These groups are the ones going after high profile money and you'll never see anything online about them until a law enforcement case brings them down.
My first thought was "Sweet justice."
In reverse hierarchy, this post is the...wait for it...First Post! W00T
...I thought that this had something to do with the robot mafia.
I think I've been watching too much Futurama
Two places where the loose, unorganized if you will, pirate distributes warez. All the torrents but more easily tracked if you use those, but not so easily fooled into trojans and other malware as rapidshare, which is 99.999% malware.
if this is similar to a 'mob' type hierarchy, who is the godfather?
My sig beat up your sig.
The last law abiding corporation I worked for promoted based upon blood lines and/or an employees ability to hang from the ceiling by their lips.
Have gnu, will travel.
this had something to do with the robot mafia.
Nice set of stairs you've got there. Would be a shame if someone were to be shoved down them.
Google is an integral part of today's online scams. Google provides material support to scammers, and helps collect the money.
Google's proliferation of low-security services makes it easier for scammers to operate, and to hide. If they had to buy those services from a hosting company, there'd be a money trail to follow back to the source. Using Google's free, unauthenticated services makes it easier for the operator to conceal their identity.
It's full-service evil.
Reminds me of Freakonomics, in which Levitt discusses how drug-dealing gangs' organizational structure mirrors that of McDonalds.
Where there is demand, someone will supply. Regardless of government attempts to intervene.
...then didn't you already fail the first mission?
That being said, organization breeds efficiency
There's a documentary on that very subject you should see.
It's called Office Space
How do i become part of this organization? http://it.slashdot.org/article.pl?sid=08/07/15/0123245 Gotcha.
If they're going corporate, they've lost the thread: "No sense being a grifter if it's just like being a citizen." -- Paul Newman, playing confidence man Henry Gondorf in "The Sting".
head of the U.S. Army Computer Network Operations (CNO)-Electronic Warfare (EW) Proponent's Futures Branch, in a recent slashdot interview.
Both "organisations" (the military & the criminal) seem to be "cybering-up" massively.
"Kill 'em all and let Root sort 'em out"
Having read nothing but the summary: Article is full of shit. Crimeware? New?
The carding scene relies on vetting through a combination of the forum administration vouching, and feedback by long standing community members.
The drug dealing scene relies on vetting via social connections. The only difference between "cybercrime" and normal crime is the processes of establishing credibility, and the methods necessary to protect yourself from law enforcement.
The threat of physical harm is as real with cybercrime as it is with normal crime as you move up the ladder and severity of crime.
NONE of this is new and has all been going on for nearly a decade. The only change is increasing caution due to the intricate stings that law enforcement has demonstrated themselves to be willing to conduct.
What the hell is 'crimeware'?
Send your spendthrift head of state this
Thank you Microsoft for enabling this with Windows!
Why hasn't anyone posted this already? The article linked from the post is useless, and that's being kind.
The actual Finjan report can be downloaded here. Requires you answer a survey before downloading. http://www.finjan.com/content.aspx?id=1994&objid=620