Identity Fraud: Presented by: MOHD ZABRI ADIL TALIB Head, Digital Forensics CyberSecurity Malaysia

(1)

Identity Fraud:

Platform for Cybercrime

Presented by:

MOHD ZABRI ADIL TALIB Head, Digital Forensics CyberSecurity Malaysia [email protected]

(2)

Introduction of Digital Forensics

Department CyberSecurity

Department, CyberSecurity

Malaysia

(3)

Digital Forensics Department (DFD)

 Provide Malaysia Law Enforcement (LE) agencies with in–house digital forensics capabilities:

I. Digital Evidence Analysis and Cyber Investigation including forensics analysis of audio and video

II On-site investigation support II. On-site investigation support

III. Data Recovery (logical, electrical and mechanical recovery)

IV. Evidence Preservation Facility V. Expert Development Lab

3

(4)

DFD roles

• To provide Digital Forensics

services to all Law Enforcement Agencies in Malaysia in criminal cases

cases

• To provide Digital Forensics

services to private organization / i di id l i i il

individual in civil cases

• To appear in court of law for expert testimony presenting the expert testimony presenting the digital evidence findings and analyses

4

(5)

Forensics Analysis Center

 Department of Chemistry Malaysia

 Department of Chemistry, Malaysia

 Reference center for physical

evidence examination and analysisy  CyberSecurity Malaysia

 Reference center for digital

evidence examination and analysis

5

(6)

Now, let’s discuss identity

fraud..

(7)

Cyber crime

Malaysia landscape

7

(8)

Cyber incidents

C

R

t d t M CERT C b S

it M l

i

Cases Reported to MyCERT, CyberSecurity Malaysia

15218

16000

12000

14000 Type of Incidents

Intrusion

Intrusion Attempt

8090 9986 8000 10000 Spam DOS

Cyber Harassment Fraud

Content Related ₈₀₉₀

6000

8000 Content Related _Total_Case

Malicious Code

Vulnerabilities Report

1372 2123 3564 2000 4000 8 115 342

728 ₅₀₃ 932 739 947 915 835

1372

1038

0

1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012

(9)

Cyber Incident Statistics

T

f i

id

t h

dl d b M CERT i

2012

Type of incident handled by MyCERT in year 2012

(10)

Identity theft

Definition

- When someone else uses your

Definition

personally identifying information without your permission

It can take place whether the - It can take place whether the

victim is alive or deceased

10

(11)

Identity theft

Is it an offense in Malaysia?

• To register communication and

Is it an offense in Malaysia?

multimedia services with fraudulent intent is to be a

criminal offense under Section c a o e se u de Sect o

232 of the Communications and Multimedia Act 1998 which

carries a fine of up to RM300 carries a fine of up to RM300, 000 or up to 3 years

imprisonment or both

11

(12)

Identity theft

Case statistics

Fraud - Identity Theft Incident Year 2012 and

400 359 200 250 300 350 19 0 50 100 150 8 90 20 0

Fraud‐Impersonation & spoofing

Fraud‐Unauthorized transaction

Fraud Online scam

0

12

Fraud‐Online scam 2012 Jan‐Sept 2013

(13)

Identity fraud

How do they do it?

The perpetrator will use whatever it takes to

How do they do it?

whatever it takes to

accomplish their objectives:

• Hacking technique • Physical theft

• Social engineering technique • Social mediaSocial media

13

(14)

Identity fraud

What can they do with it?

Criminal can use your personally identifying information to:

What can they do with it?

information to:

• Drain your bank and credit card accounts

• Obtain credit cards, loans, insurance, mortgages

• Get wireless or phone products • Obtain employment or

immigration status

• Evade law enforcement • Commit other crime

14

(15)

Identity fraud

How do we detect it?

• Unexplained withdrawal from your bank account

How do we detect it?

your bank account

• Unexplained charges on your credit reportp

• Call from debt collectors and medical providers

Y l iti t di l l i • Your legitimate medical claim

rejected because it reached your benefits limit

y

• Merchants refuse your cheques

• Arrested for a crime else allegedly committed in your

name 15

(16)

Identity fraud

How do we response to it?

• Be patience, think rational and iti

How do we response to it?

positive

• The process of correcting incorrect information about victim’s financial or personal status is a daunting task

Th d t k f l t

• The damage takes far longer to undo than it took the criminal to commit the crimes

16

(17)

Identity fraud

How do we prevent it?

1) Check your financial

How do we prevent it?

information regularly

2) Be alert to impersonators online

online

– Be sure you know who is getting your personal account or financial information online

information online

– Do not open suspicious email

– Do not click on suspicious web link

f i i il

from suspicious email

– Their objective is to get their victims to disclose their financial

it i f ti th h

security information through

unsolicited telephone calls, emails and SMS

17

(18)

Identity fraud

How do we prevent it?

3) Protect your computer and

How do we prevent it?

mobile device

– Use anti virus software, anti spyware and a firewallpy

– Don’t open files, click on links or download programs sent by

strangersg

– Safely dispose of personal information

18

(19)

Identity fraud

How do we prevent it?

4) Protect your data and personal information

How do we prevent it?

personal information

– Encrypt your data – Read privacy policies – Keep passwords private – Don’t overshare on social

networking sites

• Current location • House photo

• Vacation countdown

– Be wise about Wi-Fi – Lock up your laptop – Lock up your mailbox

19

(20)

Identity fraud

How do we report it?

The best way to report it:

How do we report it?

• Communication and

Multimedia Consumer Forum of Malaysia

of Malaysia

http://www.cfm.org.my/overviewg y

• CYBER 999 (MyCERT)

htt // t / /

http://www.mycert.org.my/en/s ervices/report_incidents/cyber 999/main/detail/443/index.htm l

20

(21)

Identity fraud

Case Study: Facebook insult to Sultan of Johor

Sumber:

21

Sumber:

http://www.kosmo.com.my/kosmo/content.asp?y=2013&dt=1022&pub=Kosmo&sec=Negara&pg=ne_01.htm http://www.bharian.com.my/bharian/articles/DendaRM20_000hinaSultanJohor/Article/

http://www.thestar.com.my/News/Nation/2013/10/21/Man‐fined‐for‐Facebook‐insult‐to‐Johor‐Sultan.aspx

(22)

Identity fraud

Case Study: Friendster fake account profile

22

Sumber: http://www.thestar.com.my/story.aspx?file=%2f2008%2f12%2f31%2fnation%2f2917893&sec=nation

(23)

Identity fraud

The challenges : Identity / ownership issues

• Difficulty in establishing an identity

The challenges : Identity / ownership issues

ownership

• To identify the person who pressed the keyboard is beyond the digital the keyboard is beyond the digital forensics limitation

• In some cases, the digital evidence g is inconclusive

23

(24)

Conflict of interest:

The Challenge of Coordination and Cooperation

• The success in

combating identity theft

The Challenge of Coordination and Cooperation

combating identity theft relies on joint efforts and coordination among all stakeholders in every relevant activity • The challenge rests • The challenge rests both in the conflict of interest and the

diff t i iti h

different priorities each stakeholder has within the fight against identityg g y theft

24

(25)

Malaysia efforts:

Internet Banking Task Force Forum

• IBTF is set up in 2004 to prevent the increase of financial crime activities

Internet Banking Task Force Forum

financial crime activities • IBTF members are:

– All Malaysia commercial banks (banks providing Internet banking services in Malaysia)

– LEA’s (Royal Malaysia Police, Central Bank (BNM), Malaysian Communications and Multimedia Commission (MCMC) and CyberSecurity Malaysia)

– Invitation for respective group (telcos / researcher)

• IBTF main roles are:IBTF main roles are:

– To develop industry-wide best practices

– To collaborate with other agencies to handle security infringement incidences

infringement incidences

(26)

US Secret Service approach:

• Form a strategic alliance of law

Electronic Crimes Task Force Methodology

g

enforcement, private industry partners, and academia which create an atmosphere to:

create an atmosphere to:

– Increase the sharing of investigative information

– Increase technical knowledge and capabilities to protect cyber infrastructure

infrastructure

– Increase ability to reach successful conclusions to cybery crime investigations

26

(27)

US Secret Service approach:

Electronic Crimes Task Force Methodology

27

(28)

Conclusion:

Combating cyber crime

• The success in combating identity fraud relies on joint efforts and coordination among all stakeholders in every

Combating cyber crime

efforts and coordination among all stakeholders in every relevant activity

• US Secret Service has successfully combating the identity theft crime using the Electronic Crime Task Force approach.

• Enforcement research center academia and financial • Enforcement, research center, academia and financial

industry need to partner up and collaborate in combating cyber crime

• More awareness programs to outreaching public about the dangerous of cyber crime and what can they do to prevent themselves from being a victim

prevent themselves from being a victim

28

(29)

Reference:

Online materials

• https://addons.mozilla.org/en-US/firefox/addon/dontphishme/

• http://www.consumer.ftc.gov/features/feature-0014-identity-theft

Online materials

• http://www.maybank2u.com.my/mbb_info/m2u/public/personalDetail04.do?channelI

d=Personal&cntTypeId=0&cntKey=OB04.01&programId=OB-OnlineBanking&chCatId=/mbb/Personal

• http://cfm.org.my/industry news/20090820/elakkan-kecurian-identiti-nasihat-ttp //c o g y/ dust y_ e s/ 00908 0/e a a ecu a de t t as at

daripada-cfm

• http://english.astroawani.com/news/show/travelling-smart-this-aidilfitri-19603

• http://www.wired.com/politics/security/news/2005/02/66681

29

(30)

30