Cybercrime
A Global Overview of the Role of
Internet Service Providers in assisting
Law Enforcement and Public Safety
efforts.
How ISP’s are critical to
worldwide Law
Enforcement and Public
Safety efforts.
SSA Donald R. Codling
FBI Cyber Division
SSA Wilfred Rattigan
FBI Legal Attache Pretoria South Africa
Latest update: 17 Aug 2010
BUT since we are dealing with
human beings-LETS NOT
FORGET…
• The Seven Deadly sins of Anger, Greed,
Envy, Sloth, Pride, Gluttony and Lust all
exist in the ‘online’ world and have been
accelerated and magnified……basically
the GLOBALIZATION OF CRIME over the
Internet has occurred.
Major Types of Cyber criminal
activity in Africa
• Cyber Fraud, particularly targeting consumer
banking, hijacked business funds transfers and
‘carding’ software installed at cyber cafes or on
ISP servers which drives internet credit card
fraud in Africa.
• Fee for service scams, internet auction scams,
fake ticket sites, fake banking and fake online
retailer sites, many crimes that would be difficult
to perpetrate face to face on a massive
scale…the list is endless with many African
victims!
Cyber criminal cases investigated by our African Law
Enforcement partners.
• Algeria-working closely with Spain on major internet
fraud ring.
• Egypt-Operation Phish Fry- arrests, 46 Million U.S.
Dollars in losses. Followup on more subjects.
• Morocco-dismantled a huge counterfeit bank card ring
using the internet , combating government website
defacement
• Nigeria-Hundreds of Advance Fee Fraud cases under
investigation
• South Africa-November 2008-13 arrests in major
organization, stole more than 400 million Rand.
The Virtual Jihad: Terrorist Use
of the Internet
Exploitation of Internet-Based
Technologies
Why terrorists use the Internet
• Fast
• Easy access
• Broad audience
• Little or no regulation or censorship
• Rich multimedia environment
• Inexpensive
• Anonymous
• Internet is a battlefield in the Global War on Terrorism
Internet tools and services enhance terrorist capabilities
• Communication
• Command and control
• Propaganda and psychological warfare
• Radicalization and recruitment
• Training
• Operational planning
• Fundraising
Top 10 Jihadist Web sites
1. al-Faloja
2. Al-Shamukh
3. At-Tahaddi
4. Al-Hanein
5. Al-Medad
6. Alqimmah-Golaha Ansaarta Mujaahidiinta
7. Al-Ma’ark
8. As-Ansar
9. The Najahden Electronic Netwrok
10.Al-Luyuth al-Islamiyyah
Bismillah,
In sha'a Allah I will keep these things going with beneficial points for
countering counter terrorism efforts.
There are some things that obviously will not be said,
because only a few people need to know them and it is harmful
for CT officials to have a heads up on what is going on. However,
there are some things which they already know,
or which they cannot do anything about, or which the Muslims have
significantly greater capabilities to counteract
anything CT officials can come up with.
As things stand, we are currently dominating nearly every front in this war,
but we are neglecting the true potential of this movement by allowing it to
continue with almost no direction whatsoever. Al-Qa'ida does what they can
to direct things, but it is not so easy when you are fighting a physical war at
the same time. Also, we are much more aware of our own situation than
they are, simply due to the fact that we are here and they are fighting jihad
already.
FBI Counterterrorism Internet Unit
•
•
•
•
•
•
Coordinates significant FBI, INTERPOL investigations of Internet
forums, websites, used to launder funds supporting terrorist
activities.
central point of contact representing the FBI with International
Internet Service Providers and International Law Enforcement
Partners.
Helps give strategic direction and overview in identifying,
penetrating and dismantling terrorists use of the Internet.
Addresses the need recognized world wide by Law Enforcement
and Public Security agencies of the mounting challenges involved in
coordinating large-scale jihadist internet forum investigations.
The jihadist web space is too large to target on an ad hoc basis and
requires considerable levels of coordination and deconfliction, both
domestically and internationally.
ISP’s globally are the business record holders, the log file holders
and technical subject matter experts often in the best position to
assist law enforcement efforts.
Contact your Countries National Police Agency, Regional FBI Legal
Attache office or INTERPOL with questions or concerns.
Recent Joint law enforcement investigations in Africa with a
significant cyber component
• Rwanda-Working closely with Ugandan officials.
• Kenyan- ATPU working closely
with Ugandan officials.
• Algeria- Working closely with Moroccan and
French officials.
• Egypt- Working closely with US and United
Kingdom officials.
• South Africa-Working closely with US and United
Kingdom officials…..
• All these cases require active ISP assistance to
locate the subjects and bring them to justice….
•
***and this is just this week!!***
None of these types of Investigations can be
brought to a successful conclusion without
the ISP’s assistance!
• The availability of IP address logs, with
accurate time and date stamps is of critical
importance to investigators.
• Having a contact name, physical address
and telephone number at an ISP
(preferably a mobile number or 24 hour
contact number) is invaluable in
emergency situations !
Single Most Helpful ISP Step
• Join the established group of 8 (G8)- 24 hour/7
day a week network contact list via your national
police agency or Justice ministry!!!
• over 50 countries presently, used to request of
ISP’s technical assistance, to request
preservation of data and to provide a recipient
point of contact for legal process.
• National Police forces or Justice Ministries in
Mauritius, Morocco, Nigeria, South Africa and
Tunisia are currently members. They are the
liaisons for global law enforcement requests-so
the ISP’s need to know them ‘locally’.
• To maximize participation, an ISP needs
the following1-Either English or French speaking POC.
2-Contact point available 24 hours day-7
days per week.
3-Technically Knowledgeable person
working at the ISP physical plant.
4-A person knowledgeable about domestic
laws and policies.
If the ISP DOES NOT HAVE all of these,
that is NOT a problem-WE WILL HELP!!
African FBI Legal Attaches
Algiers,
Algeria
•
•
•
•
•
•
•
FBI Legal attache offices and countries covered by each attache office
Cairo, Egypt
American Embassy: 011-202-797-3300
Nations covered: Egypt, Libya, and Sudan
Dakar, Senegal
American Embassy: 011-221-823-4296
Nations covered: Burkina Faso, Cape Verde, Central African Republic, Cote D'Ivoire,
Democratic Republic of Congo, Gabon, Gambia, Guinea, Guinea Bissau, Republic of
Congo and Senegal
Freetown, Sierra Leone
American Embassy: 011-232-222-26481
Nations covered: Liberia, Sierra Leone
Lagos, Nigeria
American Consulate: 011-234-1-261-0050
Nations covered: Benin, Cameroon, Equatorial Guinea, Ghana, Nigeria, Sao Tome'
and Principe, and Togo
Nairobi, Kenya
American Embassy: 011-254-20-363-6000
Nations covered: Burundi, Kenya, Rwanda, Somalia, Tanzania, and Uganda
Pretoria, South Africa
American Embassy: 011-27-12-431-4000
Nations covered: Angola, Botswana, Comoros, Lesotho, Madagascar, Malawi,
Mayotte, Mauritius, Mozambique, Namibia, Reunion Islands, Seychelles, South
Africa, Swaziland, Zambia, and Zimbabwe
Rabat, Morocco
American Embassy: 011-212-3776-2265
Nations covered: Chad, Mali, Mauritania, Morocco/Western Sahara, Niger, and
Tunisia
Reference materials and Points of
Contact within Africa for Internet
Governance issues
• List of Internet Corporation for Assigned Names
and Numbers (ICANN) Government Advisory
Council Representatives-hard copy provided.
• ICANN African Regional Relations Manager
Anne Rachel Inne• Email- anne-rachel.inne@icann.org
• Letters of Support by INTERPOL, Council of
Europe and G-8 for Law Enforcement
recommendations-hard copy provided.
• Letter of Support from ICANN Government
Advisory Counsel-hard copy provided.
AFRINIC Subject matter experts
• Anne Rachel Inne-ICANN African Regional
Relations - anne-rachel.inne@icann.org
• Adiel Akplogan-AFRINIC CEO- adiel@afrinic.net
• Lillian Sharpley-AFRINIC -lillian@afrinic.org
• AFRINIC will be forming a Law Enforcement
working group with ISP representation and input
VERY welcome!!!
• ***AFRINIC-13 Public Policy Meeting
will be held in Johannesburg, South Africa from
20-26 November 2010. ***
African Law Enforcement Cyber Crime Subject Matter
Experts-people I have personally worked with.
• South African Police Service Colonel
Beaunard Groblerccu@global.co.za
• Mauritius Police Force Inspector Narayan
Gangalaramsamynarayan10@yahoo.com
• Nigerian Economic and Financial Crimes
Commission Chairwomen Farida Wazirifwaziri@efccnigeria.org
FBI Legal Attache in Pretoria
• Physical address-American Embassy, 877
Pretorius St., Arcadia.
• Mailing address-P.O. 9536, Pretoria 0001,
South Africa
• Phone number-27-12-431-4014
• Legal Attache Wilfred Rattigan
• Assistant Legal Attache Barry Ross
• Assistant Legal Attache Anthony Velaquez
Globally, Law Enforcement and
Public Safety authorities cannot
succeed without the active
support, cooperation and
technical assistance of the
Internet Service Provider
Community.