Slashdot Mirror


Only 100 Cybercrime Brains Worldwide, Says Europol Boss

mrspoonsi writes There are only "around 100" cybercriminal kingpins behind global cybercrime, according to the head of Europol's Cybercrime Centre. Speaking to the BBC, Troels Oerting said that law enforcers needed to target the "rather limited group of good programmers". "We roughly know who they are. If we can take them out of the equation then the rest will fall down," he said. "This is not a static number, it will increase unfortunately," he said. "We can still cope but the criminals have more resources and they do not have obstacles. They are driven by greed and profit and they produce malware at a speed that we have difficulties catching up with." The biggest issue facing cybercrime fighters at the moment was the fact that it was borderless. "Criminals no longer come to our countries, they commit their crimes from a distance and because of this I cannot use the normal tools to catch them. "I have to work with countries I am not used to working with and that scares me a bit," he said The majority of the cybercrime "kingpins" were located in the Russian-speaking world, he said.

45 of 104 comments (clear)

  1. Only 100 you say? by ColdWetDog · · Score: 5, Interesting

    Perhaps 'only' 100 that you know about, but that statement is clearly insane. These attacks aren't just done by some long haired, Dorito fueled teenager with 16 screens and a hot girlfriend. Like everything else these days they're done by teams of people. Somebody good at Windows, somebody good at Cisco routers, someone skilled in social hacks, somebody with access to money.

    I don't know why we even bother with these sorts of articles. They guy's credibility is about as good as the average politician.

    "It is a tale told by and idiot, full of sound and fury, signifying nothing."

    --
    Faster! Faster! Faster would be better!
    1. Re:Only 100 you say? by Anonymous Coward · · Score: 1

      Plenty went "white hat" over a decade ago because it was lucrative.
      Just because they're not active now doesn't mean they couldn't be if they wanted to.

      There's some crazy stuff you can do these days, like run code on an Intel x86 using ZERO cpu instructions.

    2. Re:Only 100 you say? by rasmusbr · · Score: 2

      Wiktionary is your friend: http://en.wiktionary.org/wiki/...

    3. Re:Only 100 you say? by Mister+Liberty · · Score: 1

      Note where the statement came form. Cluelesser and cluelesser is hard to image...
      I know they're trolling for comment, but what the heck, they're pathological panty sniffers anyway.

    4. Re:Only 100 you say? by golodh · · Score: 1
      Err, sorry, but how would *you* know anything about that?

      Did you do any kind of analysis tracing existing malware to point-sources? Or did you see any data on that and did you identify and count those point-sources?

      No? Then what is your opinion worth?

      You seem to be confusing *operators* (i.e. the ones that actually push the button and run botnets, burglarise computers, and/or spread malware) with *researchers*, *designers* and *programmers* who never hack, but who write (and sell) the tools the operators use.

      If you had actually read the article, you would have noticed that it's talking about those tool-makers, not operators. I could very well believe that those toolmakers number only about 100 world-wide.

    5. Re:Only 100 you say? by Blaskowicz · · Score: 1

      I imagine it's happening in an extremely boring cubicle-like environment with hapless minions, dumb managers, a middle manager that moves air around and so on.

    6. Re:Only 100 you say? by rtb61 · · Score: 1

      There is only one reason to sell or distribute those tools freely and that is to enable the coder to hide their own activities behind the activities of thousands of other script kiddies. They also craft backdoors to enable them to randomly take over the efforts of those using their tools to increase their capability and to randomly shift the point of attack.

      Of lot of this activity does of course stand out from regular traffic, really stand out, especially under bit pattern analysis, not some much as far as the range of possibilities of the whole internet but certainly from the viewpoint of the typical individual user and their normal traffic versus the change of traffic for that individual user when their devices and connections are being abused.

      Want to cut down on activity make hardware firewalls a compulsory part of all modems, no firewall no connection to the internet. Including voluntary reporting of all suspicious activity detected by hardware fire walls to the communications regulatory authority, this enables a pattern of expanded activity to be immediately reported so that it can be traced and either the source targeted for investigation or cut off.

      --
      Chaos - everything, everywhere, everywhen
  2. Ok you limited good programming bastards... by MindPrison · · Score: 4, Funny

    Troels Oerting said that law enforcers needed to target the "rather limited group of good programmers". "We roughly know who they are.

    ...we know who you are, or rather I - Adam West, mayor of Quahog will spend MILLIONS of taxpayers money to find who those good programming bastards really are? Who are you, and where do you come from? I bet you're from the Matrix, spreading your ones and zeros all over the place. Hey, YOU! Yes YOU! Come here you, I'll catch you ZeroOne OneZero ZeroOne ZeroZero.

    Oh, they're crafty I tell you, those little programming bastards!

    --
    What this world is coming to - is for you and me to decide.
    1. Re:Ok you limited good programming bastards... by Njorthbiatr · · Score: 5, Funny

      It's only a matter of time before they catch the greatest mastermind of them all... 4chan.

  3. Driven by Greed and Profit and produce malware... by Anonymous Coward · · Score: 1, Funny

    ...are we talking about Microsoft here?

  4. No shit, sherlock by damn_registrars · · Score: 4, Insightful

    Of course the top cyber criminals are from former soviet bloc countries. That's where the top spammers have resided for a long time as well, and there is a lot of overlap between the two sets. While in the US we don't have anti-spam laws that mean anything, in those countries the people tasked with enforcing the laws are openly accepting bribes from people who violate them.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
    1. Re:No shit, sherlock by Caedite+Eos · · Score: 4, Insightful

      Don't forget that a lot of people there have decent CS and maths education, but less than optimal employment opportunities.

      Add to that a dim view of government in general, and you have a bunch of young people who will be happy to spend whatever time it takes to achieve a certain goal. For the wast majority the nefariousness of the goal is a complete non issue.

    2. Re: No shit, sherlock by Anonymous Coward · · Score: 2

      The Soviet Union and Eastern Bloc had fucking incredible mathematicians and CS guys, because that was cheaper to research than materials science or physics. Math costs little, and it keeps your smart people occupied and reasonably happy (seriously, this is still a thing). As a result, the Romanians were hands down the best assembly coders in the world, etc. â" and with the collapse of the 90's, the least employed coders. Same with the Russians. They found out the virii and Trojans could be lucrative, and here we are

    3. Re:No shit, sherlock by damn_registrars · · Score: 1

      Don't forget that a lot of people there have decent CS and maths education, but less than optimal employment opportunities.

      You're absolutely right.

      Add to that a dim view of government in general

      If by general, you mean government anywhere, I would agree with that. A lot of the CS and math guys from over there came out with a general attitude of unlimited cynicism towards any government. As for their own government I would say the guys we're talking about here likely see their own government as being a non-issue in their enterprise. Hell, one of the top spammers from Russia wasn't busted until we found out he had a sex dungeon full of young an disabled children in his basement. Eventually it seems he felt so far above the law to not even bother trying to hide from it.

      --
      Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  5. Pay them off by Anonymous Coward · · Score: 1

    They know roughly who they are, there's only 100 or so of them, forget trying to catch them or bring them down, just give them jobs.
    Those who are in it for the money, give them lots of money, those who are in it for the thrill or the challenge, turn them into assets, give them money, equipment and protection then use them against unfriendly nations

    1. Re:Pay them off by Stan92057 · · Score: 1

      Your a genius! We should do that for a the gang members in east LA. oh wait they can make MORE money dealing drugs then working a real job. And what about me? i want more money. Why should i be different then them? I should get more money just because i want more and i should get more because im not a criminal.

      --
      Jack of all trades,master of none
  6. There is always a top 100 by BigSlowTarget · · Score: 3, Insightful

    This is about like going after Al Queda's no 2 guy. There will always be more and really if you have problems with these guys the next set are going to throw you into fits.

    1. Re:There is always a top 100 by Teresita · · Score: 2

      I don't know. For some reason I've never felt a compulsion to click on an penis enlarger email attachment or used Firefox on Lubuntu to follow a link to "See Asian Sluts Get What They Deserve!" so to me these Russian malware creators are about as scary as ISIS threatening to chop off the head of Rosie O'Donnell.

    2. Re:There is always a top 100 by Anonymous Coward · · Score: 1

      Some people just open every email they get. Seniors especially. These are the same people who are able to avoid snail mail scams, but for some reason they aren't able to carry the same skills over to email. Working in a public library I see this behavior all the time

    3. Re:There is always a top 100 by vtcodger · · Score: 2

      Lots of job advancement opportunities for Number 3 thru N guys at Al Queda. The trick looks to be is to find another gig before you advance to Number 2..

      As for Mr Oerling, I think he is probably delusional and is vastly underestimating both the number of serious security flaws in modern software and the number of folks attempting to find and exploit the flaws, but maybe he knows something I don't.

      --
      You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
    4. Re:There is always a top 100 by Blaskowicz · · Score: 1

      Shame that opening pictures in mail is the default, too. That means an instant acknowledgement that the spam mail was read and it's somewhat more serious than an attachement or a link that leads to a javascript attack if the computer is otherwise secure.

  7. Good thing he's not running the NSA by daniel.lynn.mills · · Score: 2

    Secret service, maybe, but not NSA

  8. Just more nonsense statements looking for a budget by Rick+in+China · · Score: 5, Insightful

    "We roughly know who they are. If we can take them out of the equation then the rest will fall down,"

    The same rhetoric is encouraged by the military industrial complex to start wars that benefit their bottom line. This is no different.. "give me the resources and I'll finish it up" -- yeah, just like the War on Drugs, too, right? Nonsense. You can't attack something without the centralisation and infrastructure of stable nations or organisations, which is why things like "Bomb Isis!" fail so miserably. This dude is just making monkey statements to get funding for his department, to which even if he succeeded in taking down "the hundred kingpins", nothing would ultimately change as others would rise in 'their' place.

  9. Let me fix that for you by Anonymous Coward · · Score: 1

    Only 100 cybercrime brains worldwide behind organized crime

    there's thousands of small time smart cyber criminals that aren't making headlines or in many cases not necessarily even doing anything 'wrong' but would technically be considered cyber criminals

  10. Not "just 100", you fucking clueless idiot by haruchai · · Score: 3, Informative

    Between China, North Korean and the former Soviet countries there are THOUSANDS of programmers who can make sophisticated exploits and there are probably as many in the free world.

    You're just another power-hungry twit looking to implement toll-roads to everywhere on the information superhighway.

    --
    Pain is merely failure leaving the body
    1. Re: Not "just 100", you fucking clueless idiot by DigiShaman · · Score: 1

      To hell with the BRIC nations along with N. Korea and parts of Africa. Me? I just net block all their IP ranges. Their incoming traffic goes to NULL (black holed). So I "broke the Internet" on my side, BFD, and nothing of value was lost.

      --
      Life is not for the lazy.
    2. Re:Not "just 100", you fucking clueless idiot by haruchai · · Score: 1

      So they're both topnotch, hardcore programmers & mafia dons? And no one will have the ability or vision to replace these "bosses"?
      Remember when their used to be a Jewish mafia? Nobody replaced them, right?
      Given the collective populations of Russia, China, North Korea, Pakistan, India, the entire US-despising Muslim world, there are millions both capable blackhat hackers & criminal masterminds.

      --
      Pain is merely failure leaving the body
    3. Re: Not "just 100", you fucking clueless idiot by messymerry · · Score: 1

      To hell with NATO too then, they are just as bad...and sanctimonious too boot...

      --
      Dear Microlimp: I give you 2 valid product keys for win7 and you reject both of them. Piss off you wankers!!!
  11. Seems like a delusional new age witch hunt. by flayzernax · · Score: 2

    The only way to protect you're selves from cybercrime is to not put you're assets in easily accessible places by 'cyber criminals'. Believing you can catch all the criminals to end crime is the worst fallacy I've encountered.

    * crime is not caused by criminals, it's caused by situations that cause the majority of people to become criminals.
    * Cybercrime is on the rise because the payouts are better then other forms of crime.
    * People are getting smarter and so are criminals too
    * Our internet infrastructure is woefully in-adequate for what we want to use it for. But no one is willing to go back to the older and more reliable way of doing this. Which also had their fair share of dirty issues (filecabnets raided in the middle of the night out of the white house anyone)

    Needless to say if you don't want people to be criminals. Don't give them incentives to be criminals and try to reform people or bring them up so they feel like being a part of society rather then antisocial sociopaths.

    Of course there's probably no way to eliminate sociopathy 100% from the human genome. But there is good reason for it right now. Eliminate that reason and we'll decrease it 100 fold.

    1. Re:Seems like a delusional new age witch hunt. by iggymanz · · Score: 1

      Wrong-headed thinking on your part.

      People steal because they are thieves, plenty of people will not steal. A thief is a kind of evil person. Crime is caused by criminals, evil people

    2. Re:Seems like a delusional new age witch hunt. by Stan92057 · · Score: 1

      You also failed to tell us just were our money will be safe from cyber criminals.

      --
      Jack of all trades,master of none
    3. Re:Seems like a delusional new age witch hunt. by iggymanz · · Score: 1

      No one is starving in the USA unless they are too lazy to go get their food stamps. Then they spend those on orange drinks and ho-hos, brushing both sides of the aisle at walmart with their fat bellies. I'm talking about inner city people who do most the stealing. You make excuses for laziness and evil.

      I do know some people who were poor and hungry during the depression, my relatives and the cites they lived in. But they didn't steal and there was no crime. Strange how having morals and proper upbringing cuts down crme, while those with no family structure, no morals, no work ethic blame others and circumstances for their problems and the crimes they do.

    4. Re:Seems like a delusional new age witch hunt. by flayzernax · · Score: 1

      Criminals commit crimes, but they aren't the root cause of crime. I think that is the clarification that will help you understand my perspective.

    5. Re:Seems like a delusional new age witch hunt. by flayzernax · · Score: 1

      Probably in you're pockets. Or in a bank that doesn't allow online access. But wow that'd be a tough concept to sell in this day and age. I didn't say we were wrong for having our money online. I said it was just too easy to get at. And people who are inclined to commit this kind of crime are inclined to get at it online where it's easy to get at in our really terrible online banking system.

      But that would be less of an issue if less people had incentive to be corrupt. In an inherently 'good' society, people wouldn't really need 'extra protection' for their money. Though this is ideal shenanigans. It doesn't hurt to strive for a society where most people are 'good' and this is a low priority issue.

      Come to think of it. I don't think it's a major problem. Unless you're rich and have lots of accounts and are easily targeted, perhaps somewhere in the middle class with a shitty bank, not necessarily rich, but rich to most thieves eyes.

  12. 100? So Cheap! by Anonymous Coward · · Score: 1

    Why is the NSA so expensive if they only have 100 employees?

  13. Use the IRS? by Stan92057 · · Score: 1

    Don't know why they don't take them down like they did the early mobsters. The IRS or whatever the country uses to tax and keep a track of ones money for taxation? I mean we are talking billions of dollars stolen from all around the world and none has a clue how someone got so much money from unemployment checks or not working at all. Or theses guys have a ton of cash in the beds.

    --
    Jack of all trades,master of none
  14. Yep by Zamphatta · · Score: 1

    That sounds about right, 'cause I know 99 besides me.

  15. only 100? by whyAreAllNicksTaken · · Score: 1

    I didn't know the NSA had s few employees

  16. Forget the missile gap by DanielOom · · Score: 1

    America has a cybercrime gap with the ex-commie-courntries and unless it can catch up quick, the economy will suffer.

  17. 100 employers? by manu0601 · · Score: 1

    Are the 100 programmers their own employers, or do they work for others? In the latter case, removing them will just result in malware programmer turn over.

  18. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  19. Obvious by bytesex · · Score: 1

    Every hierarchy pyramid has a level at which there are 100 people remaining until the top. His statement was irrefutable, but useless.

    --
    Religion is what happens when nature strikes and groupthink goes wrong.
  20. They used to meet in by NewYork · · Score: 1
  21. Troels by kmoser · · Score: 1

    "Troels Oerting said that law enforcers needed to target the "rather limited group of good programmers"

    So, Troels is just trolling.

  22. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion