Slashdot Mirror


FBI: Social Media, Virtual Currency Fraud Becoming a Huge Problem

coondoggie writes: Criminals taking advantage of personal data found on social media and vulnerabilities of the digital currency system are two of the emerging Internet law-breaking trends identified by the FBI's Internet Crime Complaint Center (IC3) in its annual look at online crime. The IC3 said 12% of the complaints submitted in 2014 contained a social media trait. Complaints involving social media have quadrupled over the last five years. In most cases, victim’s personal information was exploited through compromised accounts or social engineering.

39 comments

  1. What virtual currency laws are being broken? by Anonymous Coward · · Score: 0

    Does that happen when the virtual currency losses get translated back to real $?

    1. Re:What virtual currency laws are being broken? by houstonbofh · · Score: 1

      Theft of an assent (or theft by fraud) is still theft, even if you do not sell it. (And virtual currency is defined as an asset)

  2. Another source of gigantic problem ... by Taco+Cowboy · · Score: 0, Flamebait

    While FBI was pointing finger at the social media as one of the source of huge problems it forgets, - perhaps too conveniently, - that one of the biggest source of problems happens to be >o?the government of the United States of America

    --
    Muchas Gracias, Señor Edward Snowden !
    1. Re:Another source of gigantic problem ... by MobSwatter · · Score: 2

      - that one of the biggest source of problems happens to be >o?the government of the United States of America

      Actually, Corporations that got in good with the mob run the government, and neither have much use for the law aside from what money they can manage to make off of it. Take at look at the TPP deal where corps can sue the government now, and the mob has been manipulating the court room since the 30's that I know of. Can anyone say '91 Naples Italy? Going to get real messy if it is ever going to get better, the way things are going that will be post collapse...

  3. Wrong Authority by rtb61 · · Score: 1

    The FBI is not really the correct authority to deal with this problem. It should really be an empowered communications authority that works with local and federal policing agencies to track and prosecute these communications network crimes. It could certainly escalate up to a federal investigation but the initial response should be much more readily accessible to the public and a focus on fines for poor network behaviour. This then escalating up to agents in the field for more intense investigation, not communications authority agents but Federal and State police investigative agents.

    The numbers will bog down investigative agencies and in the end much like house breaking or car theft, nothing much will be done about because they are simply unable to cope with the numbers. So much like traffic offences, it becomes more an administrative control with simple more readily applicable penalties and should it require it, escalation into full investigation by the appropriate policing authorities.

    --
    Chaos - everything, everywhere, everywhen
    1. Re:Wrong Authority by Bing+Tsher+E · · Score: 1

      What are the constitutional bounds of this 'empowered communications authority'? If, as you say, it could 'escalate up' to a federal investigation, you are implying it would be something with lesser authority.

      We don't need 'World Cyber Police' yet. There isn't a democratic framework for it to operate within.

    2. Re:Wrong Authority by houstonbofh · · Score: 1

      We don't need 'World Cyber Police' yet. There isn't a democratic framework for it to operate within.

      But we do since cyber crime almost always crosses state, and federal boundaries. Usually on purpose to make investigation harder. But you are correct in that setting up something like this and not having it abused will be very hard.

    3. Re:Wrong Authority by rtb61 · · Score: 1

      Which is why you tend to limit it to minor fines, a simple network traffic authority and for more severe crimes you escalate it to a full investigation by other authorities. It means a lot of current major felonies in terms of computer and network crimes drop to misdemeanour's and fines but they are much more readily applied, in much the same context as a speeding fine or a parking fine. So an administrative regulatory authority. The main feature being skilled people who can keep up with computer crimes and network crimes and computer forensics. They provide a place for the ready reporting of spam, phishing attacks, spy ware reports, forum spamming, virus and trojan reporting etc.. The fines could be quite severe for repeated offences.

      --
      Chaos - everything, everywhere, everywhen
  4. bail THIS one out, boys by Anonymous Coward · · Score: 2, Insightful

    Look at all the fucking criminals at the top of the banking foodchain and tell me the real problem isn't with the US dollar... Bailouts? AKA paid to royally screw up, and with taxpayer dollars? Central bankers are the problem. The solution is obviously to decentralize the system.

  5. Nobody in the financial scandal went to prison by Anonymous Coward · · Score: 1

    That really sums up the inherent, intentional dysfunction in American "justice".

    1. Re:Nobody in the financial scandal went to prison by EETech1 · · Score: 1

      ... and then everyone that they took advantage of...

      that lost everything...

      got nothing...

      unless you consider s completely destroyed credit history something...

  6. "Real" currency fraud is not a problem, of course by X.25 · · Score: 3, Insightful

    It's ok, they just slap some silly fine and noone goes to jail.

    But virtual currency fraud is a really serious one.

  7. Complaints by Earthquake+Retrofit · · Score: 3, Interesting

    Complaints involving social media have quadrupled over the last five years.

    Perhaps usage of online social media has also quadrupled over the last five years.

    --
    Fifty years of Yippie! 1968-2018
    1. Re:Complaints by CaptainDork · · Score: 1

      Yeah, well what ever and stuff because you would have had no idea that social media leaks and Bitcoin theft have been on the rise because, fuck, Bitcoin didn't even exist that long ago and stuff but the FBI has done a lot of forensics, probably via spectrometric analysis of finger prints and DNA and stuff to give you this information that you would have never in your wildest dreams have ever thought possible and stuff.

      --
      It little behooves the best of us to comment on the rest of us.
    2. Re:Complaints by houstonbofh · · Score: 1

      ...Bitcoin theft have been on the rise because, fuck, Bitcoin didn't even exist that long ago and stuff...

      But EverQuest fraud and gold theft was a problem and was worked on by the FBI. As I remember, some fraud rings were found to have stolen millions of US Dollars worth of gold and other items.

    3. Re:Complaints by CaptainDork · · Score: 1

      Gold theft was very common way before the FBI was around.

      --
      It little behooves the best of us to comment on the rest of us.
    4. Re:Complaints by Tyrannosaur · · Score: 1

      Hey! What a coincidence! These two must be correlated -- not necessarily causative; yes!

      (Also posting to fix my accidental moderation)

  8. Pot calling kettle by Anonymous Coward · · Score: 0

    ... victim’s personal information was exploited through compromised accounts or social engineering

    I imagine companies using public information to authenticate log-on is a big part of 'Social engineering' here.

    ... personal data found on social media ...

    The FBI has committed identity theft via social media too. They don't want things to improve.

  9. The Wild West of the internet by SmaryJerry · · Score: 1

    If you are on a website with a user name, I defend your right to act like an idiot. You act like an idiot and let the moderator of that specific website sort it out. But, if you are talking to people who actually exist, that you know, or even a celebrity and you make death threats or hateful comments, then I believe you should still be able to be prosecuted and fined at the least. The only problem is who is to say someone else wasn't using your user name, IP, or anything that could be hacked, spoofed, or simply left logged in on a library. I know we don't want to go South Korean and give everyone their own online identity cards, but there is a place for websites that require identities. Maybe they wouldn't be used or maybe a group of happy, polite people would emerge in those sites making them a new hub for kindness who knows.

    1. Re:The Wild West of the internet by koan · · Score: 1

      If you use your phone with Facebook, they know exactly who you are, as does any other site.

      Because Facebook (and others) can instantly check that data attached to the phone, you may want to ponder why that is possible.
      And then be sensible and "delete" your Facebook account.

      --
      "If any question why we died, Tell them because our fathers lied."
    2. Re:The Wild West of the internet by Anonymous Coward · · Score: 0

      They don't know exactly who I am at all. That would take an IMEI number and a database that they don't have. What they can do is correlate me using the phone now with me using the phone last week, but if I started off telling it I was Chuck Norris it would be giving me targeted ads for Chuck Norris today. But I didn't, I told them who I really was, so now they know who I really am. This is not a big surprise for anyone. Amazon has way more data on me that Facebook do - my CC number for a start. Should I also delete my Amazon account?

    3. Re:The Wild West of the internet by nbauman · · Score: 1

      But, if you are talking to people who actually exist, that you know, or even a celebrity and you make death threats or hateful comments, then I believe you should still be able to be prosecuted and fined at the least.

      Hateful comments? Call somebody a Nazi, go to jail.

    4. Re:The Wild West of the internet by clonehappy · · Score: 1

      They don't know exactly who I am at all. That would take an IMEI number and a database that they don't have.

      Completely untrue. When you sign in to Facebook on your device, they have access to your phone number (if you haven't already voluntarily given it to them) and device ID (not IMEI, but a unique identifier). They also get to have access to your contact list. All of your friends have also given them their contact lists. It isn't hard to correlate all those lists and numbers, combined with messaging histories and usage patterns, to know exactly who *everyone* is, even if you DON'T have a Facebook account.

      That's the part that bothers me the most, is that even if I've never used their services, they still have a profile on me.

      Zuckerberg was absolutely right when he called his users dumb fucks

    5. Re:The Wild West of the internet by houstonbofh · · Score: 1

      If you use your phone with Facebook, they know exactly who you are, as does any other site.

      Only if you use the app. The web site can not get your private data via the web browser.

    6. Re:The Wild West of the internet by houstonbofh · · Score: 1

      Hateful comments? Call somebody a Nazi, go to jail.

      They can get stronger. Brows Slashdot at -1 and see...

    7. Re:The Wild West of the internet by koan · · Score: 1

      Maybe, Normally I would agree with that, but I wouldn't be surprised to find out otherwise.

      In any case I would imagine most use the app.

      --
      "If any question why we died, Tell them because our fathers lied."
  10. Re:Why focus on social media? by Anonymous Coward · · Score: 0

    I like how this got downvoted considering how many articles on security breaches and "don't use the same password for multiple accounts" get posted.

  11. Hay FBI by Guy+From+V · · Score: 1

    IC3 GTFO

  12. Laugh by koan · · Score: 0

    Not so sure the FBI has much credibility any longer.

    It's been suggested numerous times they coach these half-assed terrorist in the US, in addition I would like the names of the social sites hit hardest, because it sounds a lot like Facebook.

    --
    "If any question why we died, Tell them because our fathers lied."
  13. It's not illegal to steal bits. by Anonymous Coward · · Score: 0

    I'm not sure now stealing crypto-currencies can be a crime. They're not money. They're hardly property. They don't have any real value.

    Waste of time for law enforcement to even touch this kind of crap. It's a risk you take when you deal with crypto-currencies.

    1. Re:It's not illegal to steal bits. by houstonbofh · · Score: 1

      It's not illegal to steal bits.

      Tell that to the RIAA and MPAA, and those asshats in Germany. Oh, and the City of London Police...

      I'm not sure now stealing crypto-currencies can be a crime. They're not money. They're hardly property. They don't have any real value.

      Wrong, wrong, and wrong.
      http://www.marketwatch.com/sto...
      http://www.irs.gov/uac/Newsroo...

    2. Re:It's not illegal to steal bits. by Anonymous Coward · · Score: 0

      The United States has already begun to put its foot down about this.

      The IRS declared Bitcoins property. Their value, like gold, can be taxed if you acquire them. Like property.

      And if someone steals your property (anything that can be exchanged for money, such as a football, Linden dollars, or Bitcoins), it's theft according to Johnny Law.

      I'm just saying what's happening, if you don't like it then go vote.

  14. Re:Why focus on social media? by houstonbofh · · Score: 1

    Look at how many websites require you to enter your name, address, date of birth, security question and security answer just to sign up for an account these days.

    No, they require you to enter "A" name, address, date of birth, security question and security answer... Damn few actually verify a thing. But keeping track of all that data is hard without a good keyminder (like keypassX) and keeping track of a keyminder is a lot of work itself. Too many people would rather just give FaceBook all there infos. So you get the inevitable result of people being lazy with security.

  15. Re:"Real" currency fraud is not a problem, of cour by houstonbofh · · Score: 1

    Real currency fraud is actually less common these days then cyber crime. I mean who carries cash anymore?

  16. Lack of Education by Anonymous Coward · · Score: 0

    Schools should educate people NOT enter real data on social networks. Never put your real name, any pictures of your face, anything that could be traced back or used against you.

    But of course they don't its such a fucking boon for police/spies/nsa whatever. Their research is a fucking google search.

    The flipside is that people with no education make social engineering for shady purposes innecesary, but what do they care. Protecting people is not their actual job.

    Disclaimer: I know this sounds like i'm fighting "the power" against "the man" or something, but it really is very fucking dangerous to stick your face online.

  17. Re:Why focus on social media? by bobbied · · Score: 1

    Look at how many websites require you to enter your name, address, date of birth, security question and security answer just to sign up for an account these days. This is not a social media problem, this is a business problem. Corporate America made this problem in name of profit and is trying to pass the dangers of it onto the government/taxpayers like usual.

    Which is why I ALWAYS lie to such sites... The only businesses who get my legal name and birthday are ones that legally require it, everybody else gets a standard fictional set of data that's somewhat related, but not my real information. Yea, I get facebook "Happy Birthday's" on the wrong day and a lot of my friends don't know my real birthday isn't what they think, but my data isn't at risk of accidental exposure this way.

    --
    "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
  18. Re:Why focus on social media? by bobbied · · Score: 1

    Look at how many websites require you to enter your name, address, date of birth, security question and security answer just to sign up for an account these days.

    No, they require you to enter "A" name, address, date of birth, security question and security answer... Damn few actually verify a thing. But keeping track of all that data is hard without a good keyminder (like keypassX) and keeping track of a keyminder is a lot of work itself. Too many people would rather just give FaceBook all there infos. So you get the inevitable result of people being lazy with security.

    How hard is it to keep a fictional identity? Just pick one, birth day, legal name and the like. Use your made up identity for everybody by default, until you are faced with situations where the REAL information is legally required. Unless you are just crazy about not being tracked and think you need to keep everything separate... In which case you need to make sure you never use your internet connection from your cellphone or at home (Not to mention you need to be careful to use only public WiFi connections in various geographic areas too... ) At that point, you just need to deal with keeping track of your lies as the price you pay for being nuts....

    --
    "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
  19. Happens on /. too... apk by Anonymous Coward · · Score: 0

    2 case-in-point "proofs thereof" from mell directed my way (#1 http://slashdot.org/comments.p... saying someone should "visit me & it's Guilliani time", posting my address + #2 http://slashdot.org/comments.p... saying I am a pedo/child-molester & I AM NOT, WTF!)

    * Man - that penniless MORON mmell's TRULY sick in the head, no questions asked... WTF!

    APK

    P.S.=> Those aren't "isolated incidents", there's others like them over time as well from others, usually by unidentifiable anonymous cowards posts & other 'threats' etc. + posting where I live etc. - et al (worse too)... apk