Showing posts with label cybercrime. Show all posts
Showing posts with label cybercrime. Show all posts

Monday, 22 January 2018

5 types of cybercriminals

Technology has evolved. Unfortunately, humanity does not always evolve with it. As soon as the internet was invented, bad people were coming up with bad ways to use it.

Here are five types of cybercriminals:

INDIVIDUALS who are motivated by financial gain, basically your run-of-the-mill thieves with a 21st century twist. They can get you with phishing or malware scams.

ORGANIZED GROUPS who are motivated by financial gain. These groups are often highly organized, with specialization of roles and responsibilities. They often attack banks or go after intellectual property.

NATION-STATES whose intent ranges from monitoring other countries to interfering in elections to outright cyberattacks. They sometimes go after intellectual property. (Here's looking at you, China.) Some states employ thousands of citizens to conduct such activity.

CYBERTERRORISTS who partake in a sort of digital nihilism, where the only goal is disruption and destruction, often for political reasons. While ISIS immediately comes to mind, cyberterrorism is not limited to jihadists, but can include any group whose aim is to disrupt and destroy, such as eco-terrorists, white supremacists, and homophobes.

HACKTIVISTS are distinguished from cyberterrorists in that their goal is not destruction per se. Hacktivism is the subversive use of computers and computer networks to promote a political or social agenda. The term is confusing, because many self-described hacktivists are do-gooders who seek to advance human rights. While their actions are technically illegal, we'd like to distinguish them from the attention seekers or those with nefarious social goals or the generic "disrupt the status quo" justification. These often call themselves "hacktivists" though they would fall into the cyberterrorist category.

Wednesday, 17 January 2018

The crime of the 21st century

They said it was the perfect crime, except it wasn't. The gang would have gotten away with it were it not for greed, criminal stupidity, and the frigid obstinacy of a Boston winter.

The Great Brink's Robbery occurred on this date in 1950. The heist took two years to plan and was at the time the largest bank robbery in United States history, pulling in $2.775 million USD ($28.2 million USD today.) The robbers, who wore uniforms similar to those of Brink's employees and Halloween masks, left but three clues, none of which was helpful in their capture. (DNA evidence was not used in forensics until 1986, otherwise the chauffeur's cap left behind by one of the robbers may have given him up sooner.)

Brink's attempted some prehistoric crowdsourcing in seeking information about the crime, offering $100,000 USD for tips leading to the arrest and conviction of the perpetrators. No internet was needed to receive hundreds of dead ends and conspiracy theories, as any kook with a phone seemed to have a "tip." Police rounded up the usual suspects around Beantown, but it was a long list of hoodlums and hooligans.

Since the robbery had occurred in the dead of winter, the Boston ground was thoroughly frozen. Despite the careful planning of the thieves, it seems they had not considered winter's wrath, as they surely would have buried the cut up pieces of the getaway truck had the ground been receptive to a shovel. Instead, bags of the cut up truck meant for interment were discovered by police two months after the heist. Having learned through interviews that witnesses had seen a green truck outside the bank that day, the discovery of parts of a truck matching that description proved to be a break in the case. Two of the suspects lived in the neighborhood where the parts were discovered, bringing closer scrutiny upon them.

But it would be years before any arrests could be made; in fact, the gang were arrested a mere five days before the statute of limitations ran out, five days shy of the six year mark that would have put them in the clear forever.

In the meantime, two of the gang members went to prison for another burglary. Another went to prison for tax evasion. One had to fight deportation. A fifth spent time in prison for parole violations. One died. The robbers had agreed not to touch the money until the statute of limitations had expired, but all of this legal trouble left some of them in need of the loot before then. One kidnapped another for ransom, then was shot and wounded by a hitman. In the end, he was the one who confessed, imagining his associates living life in luxury while he spent his remaining years in prison for another crime. The gang ended up getting eight to ten years in prison, and half of the money was never recovered.

Over the years, many bigger bank heists made the nearly $3 million from Brink's seem like small potatoes. The Guinness Book of World Records lists the robbery of the Banco Central in Fortaleza, Brazil as the largest physical bank heist in history. They made off with about $160 million USD. Some of the thieves have been arrested; most have not. Some ended up dead. Only $20 million USD have been recovered to date.

These days, you need not suffer the physical labor of robbing a bank or risk getting backstabbed, kidnapped, or murdered by your co-conspirators.  Now you can rob away from the comfort of your living room all alone. All you need is a decent internet connection, some hacking skills, and a secure place to change the money into something usable and untraceable.

The first online bank robbery happened in 1994, when much of the world had never heard of the internet, the FBI had no cybercrime team, and Nigerian princes had yet to ask you to help them save their funds. A group of criminals on mulitiple continents, led by a Russian programmer named Vladimir Levin, hacked into Citibank and began to steal money, adding up to more than $10 million USD. (The more things change, the more they stay the same?) He was eventually convicted and sentenced to three years in prison, with all but $400,000 USD recovered.

Today, a major target for virtual bank robbers is Swift, the international monetary transfer system. Perhaps the largest of these robberies involved the Bangladesh Bank, when hackers made off with more than $80 million USD. It is thought that at least ten similar, albeit smaller attacks, have hit Swift.

Card cloning is another new development in the world of bank robbery. One group took $45 million USD from ATMs in a matter of hours. Hackers can get your card information when you use it online.

Phishing and malware are a favorite tool of the nouveau bank robber. You can protect yourself by reciting this mantra: if it's spamming that you think, don't you dare click that link. Or just follow this advice: https://www.welivesecurity.com/2016/09/22/5-simple-ways-can-protect-phishing-attacks/

Global financial institutions suffer tens of thousands of cyberattacks every minute. Hackers would love to get their hands on your financial information - account numbers, your address, the routing number that would allow them to transfer your funds into an account of their choosing... Yet too many of the world's banks don't realize the extent of their cybersecurity problems. One macrocosmic solution to the problem is to introduce regulatory legislation that requires financial institutions to take greater cybersecurity precautions. At the very least, you can ask your bank to do so.

Of course, physical bank robberies still happen. In 2016 in the United States alone, more than 4,000 bank robberies took place. But there's a new twist on the physical robbery - thieves are posing as IT support and installing devices to siphon off cash electronically. What's more, criminals can use DDoS attacks to take CCTV offline long enough for them to pull off a traditional mask-on, hands-up bank robbery. Technology can make our lives easier, even for those of us with criminal proclivities.

One aside: several films were made about the Great Brink's Heist, including 1978's The Brink's Job. In August of that year, 15 unedited reels of the film were stolen at gunpoint by robbers demanding a $1 million USD ransom. The joke was on them, however, as positive prints of the negatives existed elsewhere, and nothing was lost, proving, once again, that crime doesn't pay in the end.



All is not lost. Take steps to protect yourself from virtual bank robbers using VPN encryption. Get it here: https://www.sumrando.com/vpn.aspx.



Thursday, 19 January 2017

SumTips: Davos’ 2017 Guide to Business Cybersecurity

locked computerThe annual World Economic Forum in Davos, Switzerland, is underway. While the election of Donald Trump to the American presidency has attendees questioning what else 2017 will bring, one concern remains clear: cybersecurity.

In conjunction with the live event, the Forum offers a host of suggestions for making the coming year cybersecure, for businesses and individuals alike:

 

From “Why being a responsible leader means being cyber-resilient”:
  • Cyber risk is a systemic challenge and cyber-resilience a public good. Without security and resilience in our networks, it will be impossible to safely take advantage of the innumerable opportunities that the Fourth Industrial Revolution is poised to offer. Responsible and innovative leaders, therefore, are seeking ways to deal with these risks. In order to meet these challenges and be truly responsive to and responsible for the challenges of digitalization, leaders need tools and partnerships.


From “Defending against cybercrime: how to make a business cyber-resilient”:
  • Cyberattacks, cyber-breaches and cybercrime are not new problems and are universally acknowledged to be costly, pervasive and increasingly sophisticated. The best defence against such intrusions is cyber-resilience: building capabilities to protect yourself and your business from cyber threats, and building the ability to rebound from attacks, should they happen.


From “Four steps to protect your business against cybercrime”:

Ask yourself these questions:
  • Is the board on board? Security has to be on the board’s agenda. They need to be constantly thinking about the worst case scenario: what would happen if your information were stolen? How badly would your business be damaged if one individual were bribed or blackmailed? What are all the possible ways someone could attack?
  • Is security part of your culture? The board members can’t do everything themselves. You need to build security awareness into your organization’s culture by making it part of everyone’s role. Give them responsibility, and encourage them to speak up.
  • Have you separated your data? The trick is to make sure you have layers between your systems. If your customer data is behind another wall, it’s safer. You want to make sure your most valuable information is hidden – even from your own employees. You don’t see bank vaults out on the street. They’re behind checkpoints, cameras and closed doors. Do the same with your data.
  • Do you have all the basics sorted? Start with making sure passwords are strong and long and ensuring that all the right policies are in place. Encryption should be used across the board and you need a response team ready to deal with attacks and minimize the damage. Spare a moment to think about whether your partners are keeping your data safe. Most importantly, think from a criminal’s perspective: try hacking back into your own business to identify vulnerabilities and then fix them.

Protect yourself, surf secure and stay Rando!




Image credit of Shutterstock.com.
Want more SumTips? Read on!

Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page). 

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Thursday, 8 December 2016

SumTips: 6 Reasons the Internet Is Unkind to Indian Women

Indian flag and mapCyber VAW (violence against women) threatens women daily in India, concludes a recent study by Japleen Pasricha, founder and director of Feminism in India.com. The report, “Violence” Online In India: Cybercrimes Against Women & Minorities on Social Media offers statistics not to be overlooked:

1.    Women in India frequently block or ignore their online harassers rather than report their unwanted behaviors, despite the creation of a Cyber Crime Prevention against Women and Children (CCPWC) portal for this very purpose.

2.    Of the 500 women surveyed, 36% of those who were harassed online did nothing in response. 28% merely reduced their online presence.

3.    30% were unaware that laws existed to protect them.

4.    38% of those who reported online harassment found the legal response to be “not at all helpful.”

5.    15% of respondents reported experiencing depression, stress, insomnia or other mental health issues in response to online harassment.

6.    Specific incidences include:
  • A writer, poet and activist threatened with acid attacks and gang rape for tweeting about a Hyderabad beef-eating festival.
  • An activist harassed during an online discussion about violence against women; she later left the conversation.
  • A journalist and author also known as “India’s most trolled woman.” Her decision to publish an account of her childhood sexual abuse has been met with criticisms including the label “antinational.”

Read the report, surf secure and stay Rando!



Image credit of BOLDG/Shutterstock.com.
Want more SumTips? Read on!


Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page). 

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Thursday, 8 September 2016

SumVoices: Africa Rising - West Africa's Cybersecurity Challenge

Our last installment of SumVoices featured Pakistani lawyer and activist Yassir Latif Hamdani. This month we bring you insight from Ghanaian blogger Ibrahim.

Ghanaian flag and map
[Source: BOLDG/Shutterstock.com]
Cybersecurity remains a challenge within the West Africa sub-region. Cybersecurity is the protection of information systems from theft or damage to hardware, software, and to the information on them, as well as from disruption or misdirection of the services they provide. The upsurge in cybercrime among West African nations is no longer a mystery but a reality that has come to stay. The growing phenomenon of cyber crime is having a negative impact on socio-economic activities in a way that raises a lot of concerns for stakeholders involved in cybersecurity. As the internet, networked systems, and the use of mobile phones expand throughout sub-Saharan Africa, nations are grappling with multiplying cybercrime threats. Most cyber laws over the period sought to address issues such as mobile security, computer forensics, strengthening national laws, building emergency response teams and ensuring that comprehensive national cybersecurity plans promote internet freedom and respect for civil rights.

The Economist
, the International Business Times and organizations such as the African Development Bank (AfDB) have asserted that Africa is home to some of the world’s most rapidly growing economies. This new Africa, captured by the aphorism “Africa rising”, is reflected in the continent’s expanding middle class and rapid adoption of mobile technology. According to recent estimates by the International Telecommunications Union (ITU), the number of mobile subscribers reached 63 percent in 2013, and more than 16 percent of the African population are now using the internet. Furthermore, it is estimated that the global value of web-based retail sales for 2013 amounted to $963 billion, while business to consumer (B2C) e-commerce sales for the same period totaled $1.3 trillion. Although the e-commerce market is dominated by developed economies, the global share of e-commerce for the Middle East and Africa is expected to rise from 1.6 percent in 2011 to 2.3 percent by 2016.

A recent study by the International Data Group Connect investigating the state of cyber threats in various regions of Africa, with particular emphasis on Egypt, Kenya, Nigeria and South Africa, shows that there is a strong correlation between cybersecurity and economic growth. Traditionally, West Africa has a high rate of software piracy. According to a 2011 study, the average rate of software piracy in the region is about 73 percent, with little change in recent years. In addition to the financial loss — $1.785 billion —, the high level of use of unauthorized software is likely to aggravate the region’s virus and malware woes.

The study by the International Data Group Connect estimates that annually, cybercrimes cost the South African economy $573 million, the Nigerian economy $200 million, and the Kenyan economy $36 million. It is important to understand that no one person or institution can have the requisite capacity to deal with cybersecurity. Cybersecurity is not an event but rather a process. As a result, it is not simply a matter of passing legislation, or something that belongs to lawyers only. Members of Parliament, lawyers, the judiciary, intelligence/military, civil society, media, young people and members of the public as key stakeholders should all be involved in efforts to deal with cybersecurity at the earliest available opportunity. It is important to engage all stakeholders to ensure the necessary buying and that they understand the issues and processes involved. 


Want more SumVoices? Read on!

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Monday, 8 August 2016

SumTips: 7 Ways to Ensure a Cybersecure August Holiday

Credit card phishing
[Source: maxuser/Shutterstock.com]
It’s August, which for many means vacation time. Before you head off to a sandy beach or a cobblestone-strewn city, be sure to protect yourself from cybercriminals:

1.    Do not post your travel plans on Facebook, Twitter, Instagram or any other social media site.
Doing so risks providing criminals with an opportunity to access devices left behind or invite themselves along on your adventures.

2.    Avoid links and attachments to travel and hotel coupons, as well as local travel websites.
The offers may seem enticing, but too often viruses and malware are lurking beneath the surface.

3.    Don’t install mobile tour apps. Any apps beyond those offered in an official online store pose a security threat and leave your device accessible to hackers.

4.    Let your credit card companies know you are travelling.
Give yourself a second set of eyes to watch for unexpected activity.

5.    Keep your device with you.
Ideally, your smartphone should never leave your sight. However, if a dip in the pool makes such things impossible, store your device someplace secure, such as a hotel room safe.

6.    Minimize ATM and Point-of-Service transactions, especially with machines that appear to have been tampered with or disfigured.

7.    Avoid free, insecure public Wi-Fi.
Hackers know to look for personal information wherever there is unprotected Wi-Fi (hotels, coffee shops and train stations). If you do use password-protected public Wi-Fi, be sure to login to your SumRando VPN as well.

Happy travels, surf secure and stay Rando!



Want more SumTips? Read on!
 
Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).
 
SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Wednesday, 3 August 2016

SumTips: 5 Ways the Brazil Olympics Threaten Your Cybersecurity

Olympic rings with athletes It’s no secret that the 2016 Summer Olympics are plagued with problems. Although it’s easy to get wrapped up in talk of the Zika virus, Dilma Rousseff’s impeachment and incomplete construction, everyone’s eyes—whether in Brazil or from afar—need to be focused on the many ways the Games will be leveraged to compromise innocent individuals’ cybersecurity. Take note of:

1.    Malicious Links: Excited to bet on the women’s soccer finals, rewatch the 400m IM swim or receive an invitation to participate in an Olympics ticket lottery? So are hackers. The Games are probably prompting you to spend more time online and in your inbox, but don’t let them distract you from safe browsing practices. Remember: no one can make you click on a malicious link without your consent.

2.    Smartphone Theft: An iPhone 6 is 156% more expensive in Brazil than in the United States. If you are taking yours to Rio, keep it in sight or you might not see it again.

3.    Public Wi-Fi: Where there are tourists, there is public Wi-Fi and the Olympics are no exception. Insecure Wi-Fi should be avoided at all costs, especially near stadiums and hotels, where hackers lay in wait. When using password-protected public Wi-Fi, be sure to also login to your SumRando VPN and to save any sensitive transactions for home.

4.    ATM and Point-of-Sale Machines: One swipe is all a hacker needs to steal your information. Try to minimize transactions, especially if you lack the added security of a “chip” (EMV-backed) card.

5.    Terrorist Recruitment: ISIS has begun producing online propaganda in Portuguese in an attempt to recruit Portuguese speakers. What this could mean for the Olympics is anyone’s guess.

Friday, August 5 marks the opening ceremonies of the 2016 Summer Olympics. Do your part to make it a safe and secure event to remember.


Want more SumTips? Read on!
 
Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).
 
SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Wednesday, 27 July 2016

SumTips: 10 Statements Worth Repeating from RSA Conference 2016 APJ

Vulnerability
[Source: BeeBright/Shutterstock.com]
RSA’s 4th annual Asia Pacific & Japan Conference took place from July 20th to 22nd in Singapore – and with it came a bleak portrait of cybersecurity today. A series of keynote addresses reinforced what we already know, that it is indeed a hacker’s world:

from K Shanmugam, Minister for Home Affairs & Minister for Law, Singapore:
1.    “[In the UK], the number of crimes committed through the internet has exceeded the crimes committed in the physical space. For us [in Singapore], in the last year, the number of crimes committed under the Computer Misuse Act has increased by 40% over the previous year.”

from Glenn Gunara-Chen, Executive Director, Fraud Investigation & Dispute Services, EY:
2.    According to the EY Global Information Security Survey 2015, 23% of respondents open phishing emails and 11% click on attachments.

3.    “The common denominator across the top four breach patterns [phishing & crimeware, physical theft/loss, misuse of privileges and miscellaneous errors]—accounting for nearly 90% of all incidents—is people.”


4.    “Cybercrime is the new normal.”


from Chris Carlson, Vice President of Product Management, Qualys:
5.    “In January of this year, there was only one recorded case of ransomware in Singapore. In March, 155. And it’s increasing.”
 
from Fang Chao, Director of Alibaba JAQ Security, Alibaba Inc.:
6.    “95% of popular mobile apps have counterfeiting apps.”
   
from Amit Yoran, RCA President:
7.    “$75 billion USD were spent in cybersecurity in 2015 alone.”

8.    “70% of organizations in [Asia-Pacific/Japan] report that they’ve been successfully compromised by an intrusion in the last 12 months—and I’m willing to bet that many of the remainder aren’t able to detect the fact that they’ve become victims.”


9.    “56% of companies say that it’s unlikely or highly unlikely that they’d be able to detect a sophisticated attack.”


10.    “Tools alone won’t win the battle for us. We need super smart, creative humans.”


Be aware, surf secure and stay Rando!


Want more SumTips? Read on!
 
Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).
 
SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Wednesday, 22 June 2016

SumTips: Eight Ways to Protect Your Mobile Device When Traveling

Woman in train station with device
[Image credit: Rawpixel.com/Shutterstock.com]
Solstice has arrived, which means it’s summer in the north, winter in the south and travel time for individuals everywhere.

Before you board your next flight, however, remember that cybercrime is a problem far from being solved. McAfee recently estimated that the annual global cost of all cybercrime exceeds $400 million and a United Nations study found digital theft to affect between 1 and 17% of the online population (as a comparison, physical crime affects less than 5%). Significantly, these stats are based on reported incidents, yet 80% of cybercrime goes unreported.

Airports and hotels are two of cybercrime’s biggest targets, so when planning your next trip, take a moment to protect your digital security:

  • Disable auto-configuration so your device does not automatically connect to an open network without your approval.

  • Update your device's operating system and security software to the latest versions. Cybercriminals love to exploit old software before it is patched. 

  • Keep your device with you. Don’t leave your device in your hotel room—not even in the safe—and don’t set your phone on a bar or restaurant table. For additional protection, keep a hand on your device while chatting with your barstool neighbor and make sure your device is password protected. One more tip: Use only your device and not public computers. Cybercriminals know to install keylogging software on accessible computers, allowing them to learn your keystrokes and break the strongest of passwords. 

  • Only use password-protected public Wi-Fi. Remember that free access points are routinely established with malicious intent. Even when logged into authentic public Wi-Fi, further protect yourself by refraining from sending sensitive information like banking or financial transactions.   

  • Confirm your hotel’s Wi-Fi network and make sure it is properly secured. Hackers are stealing holidays of their own by creating bogus hotspots with similar or vague names ("Hotel Free Wi-Fi," for example) that show up alongside authentic networks and even installing malware through pop-up windows on hotel networks. 

  • Use secure browsing. If a URL doesn’t have https://, it isn’t encrypted and shouldn’t be used. 

  • Use SumRando VPN. Never use public Wi-Fi without a VPN. Our free 1 GB plan will protect your data throughout your holiday travel, whether you’re on Windows or Android. 

  • Use SumRando messenger to communicate securely with loved ones back home. Our encrypted messenger is free and allows you to chat without worrying about eavesdropping government censors or cybercriminals.

Happy Solstice, Randos!


SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Tuesday, 19 January 2016

قانون الجرائم المعلوماتية : جولة بين فصول القانون

Our last installment of SumVoices featured Fahad Desmukh, journalist and digital human rights activist with Bytes for All, Pakistan. This month we bring you an anonymous contributor from Algeria, in Arabic and English (below).
 

Algeria, SumVoices, cybercrime, SumRando Cybersecurity, VPN, Secure Messenger, Web Proxyفرض التقدم المسجل في مجال تكنولوجيات المعلومات والاتصال في السنوات الأخيرة فضاءا جديدا لتبادل تدفق المعلومات الرقمية والتي تتم عبر الكثير من المعاملات والخدمات الالكترونية. كما أدى التطور الرقمي في معظم دول العالم للرد واتخاذ إجراءات قانونية مناسبة للاستخدامات المختلفة لأجهزة الكمبيوتر وذلك للتصدي ومحاربة جميع أشكال الجريمة الالكترونية وفق تشريعات محددة.

عندما تصبح التكنولوجيا مكانا للجريمة، فإن القانون يجب أن يعتمد على اليات للرقابة توفر الحماية الكاملة لمستخدمي الانترنت. وقد اتخذت الجزائر مبادرة لجعل القانون ينظم ويراقب هذا النوع من الجرائم، وقد اعتمدت في نص القانون على قواعد محددة بشأن حماية ووقاية ومحاربة كل أشكال الجرائم المتعلقة بتكنولوجيات الاعلام الاتصال. وقد قام التجمع الشعبي الوطني ومجلس الأمة بالمصادقة على القانون يوم الخامس من اوت 2009.

تتبادر أسئلة كثيرة الى أذهاننا عندنا نسمع ما يجري حولنا من جرائم الكترونية، كل هذه الجرائم الالكترونية الصغيرة والكبيرة التي نسمع بها كل يوم، ونتساءل عما فعلته الجزائر في هذا المجال باستثناء مواد من قانون الجرائم الالكترونية لا يغطي حتى كافة جوانبها.

تكافح العديد من بلدان العالم بشكل فعال ضد الجرائم الالكترونية، وتعمل لتعزيز الامن الالكتروني لحماية مستعملي الانترنت، هذا أبعد مما تكون عليه الجزائر حيث تكرس الحكومة اهتماما أقل حول تطوير الأمن على شبكة الانترنت.

في هذا الوقت، حيث صارت المشاكل الإقليمية الالكترونية تجري على الانترنت، تتصرف الجزائر وكأن الأمر لا يعنيها، وفقا لإحصائيات موقع وولد ستايت تمثل نسبة دخول الانترنت في الجزائر فقط (27.8٪). كما أن استراتيجية e-Algeria والتي تهدف الى توفير الانترنت في جميع الشركات والمدارس والمنازل لم تكن بحجم التوقعات. حتى أن خدمة الجيل الثالث لم ترق للحجم المطلوب والجيل الرابع ما زال ينتظر.  الكثير من الشركات لا تتوفر على خدمة الانترنت الى الساعة والفواتير، وقسائم الدفع ماوالت على الطريقة القديمة التقليدية حتى الان. لا وجود التجارة الإلكترونية، ونفس الشي بالنسبة الدفع الالكتروني. ولكن هذا لا يمنع من ادراج الجزائر في قائمة أكثر البلدان ضعفا في مجال الأمن السيبراني.

لقد تم نص بعض القوانين المحلية على الصعيد الوطني بخصوص الامن الرقمي في منطقة الشرق الأوسط وشمال افريقيا، ولكن كما نعلم جميعا الإنترنت ليس له حدود. التنظيم والتعاون الدولي أمر أكثر من ضروري للنجاح في التصدي لتهديد جرائم الإنترنت الدولية.

وينص قانون جرائم المعلوماتية الجزائري، والذي يتضمن 19 مادة و 6 فصول، في الفصل 2، إمكانية اللجوء إلى مراقبة الاتصالات الالكترونية لأغراض أمنية، وفقا للقواعد المنصوص عليها في قانون الإجراءات الجنائية وهذا القانون خاضع للأحكام القانونية التي تضمن سرية المراسلات والاتصالات. هذا النص يراه للبعض مثيراً للقلق.

 اذ أنه يسمح للدولة بالتجسس وإختراق للمواقع التي تعتبر خرقا لتعريفها لجرائم الإنترنت بصورة غامضة. فيما أن، المواد 3 و 4 و 7 تعطي السلطة الحق في للتنصت ورقابة الانترنت والتفصيل عندما يكون مطلوبا دون الشرح في اي الحالات يكون هذا الامر مطلوباً. فيما ان المادة 05 تمنح الدولة القدرة على الإختراق عن بعد والتجسس على انظمة الكومبيوتر إذا كان ذلك مطلوبا من قبل القاضي. المادة 10 و 11 تطلب من "مزودي خدمة الإنترنت" لتخزين كافة الاتصالات والمعلومات التعريفية . المادة 13 و 14 استحداث هيئة جديدة لمكافحة الجرائم الإلكترونية، و نص القانون  غير واضح  ولا يشرح لطبيعة هذه الهيئة.
فيما أن المادة (4) تمنع الجرائم الإرهابية  و أعمال تخريبية وجرائم ضد التي تهدد أمن الدولة، وعندما يكون هناك معلومات عن هجوم محتمل لنظام تكنولوجيا المعلومات  للنظام العام أو مؤسسات الدفاع ، أو الاقتصاد الوطني، وفيما يتصل تنفيذ طلبات المساعدة القضائية الدولية.

لا يمكن إجراء هذه العمليات والمراقبة، وفقا لأحكام هذا القانون، إلا على إذن كتابي من السلطة القضائية المختصة. الا في حالة تتعلق بجرائم إرهابية أو تخريبية والجرائم ضد أمن الدولة، يتم إصدار إذن من النيابة العامة لدى محكمة الجزائر العاصمة لضباط الشرطة القضائية  للوقاية ومكافحة الجرائم المتصلة بتكنولوجيا المعلومات والاتصالات (ICT)، لمدة 6 أشهر قابلة للتجديد.

ولذلك، ينبغي ان يكون للمجتمع المدني الجزائري معرفة ودراية بما يحدث و ان يشاركوا و يتعاونو مع المؤسسات الاخرى  لتفادي حصول انتهاك للحرية وحقوق الإنسان تحت ذريعة مكافحة الإرهاب أو الجريمةالإلكترونية.

الآباء والأمهات والأطفال والمراهقين والمؤسسات العامة والخاصة، والمواطن بشكل عام، الجميع يشعر بالقلق إزاء المخاطر الناجمة عن سوء استخدام الإنترنت دون توخي الحذر.

هذا و تتزايد جرائم الانتنرنت في الجزائر بحيث تم تسجيل أكثر من 300 حالة تتعلق بجرائم الإنترنت  سنة 2015 ، كما ان  حالات جرائم الإنترنت التي سجلتها الشرطة والتي تتمثل في التشهير وسرقة الهوية  و انتهاك الخصوصية في تزايد. وعلاوة على ذلك، كما تم تسجيل حالات أخرى بصفة اقل مثل قرصنة المواقع الإلكترونية بما في ذلك مؤسسات الدولة، وحالات الابتزاز. كما تزال عملية دفع شكوى لدى جهاز الامن من قبل ضحايا الجرائم الالكترونية ثقافة جديدة لا يعرف عنها الكل أو الخجل من التشهير عن انفسهم.


اتخاذ خطوات لحماية نفسك على الانترنت . تبدأ من خلال SumRando VPN تحميل .
VPN



هل تريد المزيد من SumVoices ؟ واصل القراءة!
SumRando Cybersecurity is a South Africa-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

SumVoices: Cybercrime in Algeria - Phenomenon on the Rise

Our last installment of SumVoices featured Fahad Desmukh, journalist and digital human rights activist with Bytes for All, Pakistan. This month we bring you an anonymous contributor from Algeria, in English and Arabic (above).

Algeria, SumVoices, cybercrime, SumRando Cybersecurity, VPN, Secure Messenger, Web ProxyThe progress recorded in the field of information and communication technology in recent years has imposed a new space for the exchange of digital information in which all types of transactions and electronic services are conducted.

The digital revolution has led most countries of the world to react and to commission regulatory measures pertaining to computer usage. To address cybercrime, specific legislation has been adopted.

When technology enables crime, laws must adopt adequate control mechanisms to protect internet end users. Algeria has taken the initiative to make a law that regulates and supervises this kind of crime. It has adopted a law that addresses specific rules on the protection, prevention and the fight against all forms of offenses related to information and communications technology. The National People’s Assembly and the Council of the Nation implemented this law on 5 August 2009.

Many questions come to mind when we see what is happening around us, the small and large computer crimes we hear about every day. What has been done in Algeria regarding this sector apart from this small piece of legislation that does not cover all aspects of cybercrime?

Many countries often struggle to be effective against cybercrime, strengthen their IT security, and protect internet users. This is also the case in Algeria where government is much less concerned about developing web security.

In this time when territorial conquest battles are currently running on the net, Algeria acts like it is not concerned. In fact, Algeria is not very connected to the net, with only 27.8% of the population having access, according to the Internet World Stats website. The e-Algeria strategy that aims to connect companies, homes, schools, etc. is still in its infancy. 3G has been commissioned and the country still waits to be introduced to 4G. Several Algerian companies are currently disconnected; invoices, pay slips and purchase orders have not dematerialized. Electronic commerce does not exist, same with electronic payments. However, this does not prevent Algeria's inclusion on the list of most vulnerable countries in the field of cybersecurity.

In the MENA region, some regulation has been created nationally; however, as we all know, the internet has no borders. International regulation and cooperation is necessary to successfully tackle the threat and be a serious counter party against international cybercrime.

The Algerian cyber law, which includes 19 articles and 6 chapters, provides in Chapter 2 the possibility of recourse to the surveillance of electronic communications for preventive purposes, in accordance with rules set by the Criminal Procedure Code and this Act subject to legal provisions guaranteeing the confidentiality of correspondence and communications. This text worries some, as it grants unprecedented power to the state. It permits the state to spy and hack websites that it deems in breach of its vague cybercrime definition. In addition, articles 3, 4 and 7 give the power to the state to eavesdrop and censor internet and detail cases when it is required. Article 5 grants the state the power to remotely hack and spy computer systems if required by a judge. Articles 10 and 11 require “internet providers” to store all communication and identifying information for a minimum of a year. Articles 13 and 14 introduce a new body for combating cybercrime, but the text of the law is not clear as to the nature of this body. This whole law is in clear breach of several citizen rights as given in the constitution, including article 36, which explicitly grants freedom of expression, and article 39, which explicitly grants the right to privacy.

These monitoring operations prescribed by Article 4 may be made to prevent such offenses designated terrorist or subversive acts and offenses against state security, and when there is information about a possible attack on an IT system representing a threat to public order, national defense, state institutions, or the national economy, as well as in connection with the execution of requests for international judicial assistance.

These surveillance operations can’t be performed, according to this law, except with written authorization by the competent judicial authority. In the case related to offenses of terrorist or subversive acts and offenses against state security, authorization is issued by the Public Prosecutor at the Court of Algiers to the judicial police officers within the body National prevention and Fight against Crime related to information and communications technology (ICT), for a period of 6 months renewable.

Therefore, Algerian civil society should mobilize and raise its voice to collaborate with the news body to ensure that there are no violations of freedom and human rights under the pretext of the fight against terrorism or cybercrime.

Parents, children and adolescents, public and private institutions, and citizens in general are concerned about the dangers posed by the misuse of the internet without caution.  Algeria is far behind in this area compared to other African or Arab countries.

More than 300 cases related to cybercrime were resolved in 2015, showing that cybercrime is gaining ground in Algeria. The largest percentage of cybercrime cases recorded by the police concerned the use of pictures of children for pornography, defamation, and business identity theft. Other cases that are concerning deal with piracy of electronic sites – including those of state institutions – blackmail cases, and also cases of the violation of privacy. According to these exceedances, victims of cyberattacks are usually public and private administrations, foreign companies, and individuals. The data are unreliable since the culture is hesitant to file complaints as victims of cybercrime because people don’t know about it or they are ashamed they have been defamed.

Take steps to protect yourself online. Start by downloading SumRando VPN.

VPN



Want more SumVoices? Read on!
SumRando Cybersecurity is a South Africa-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Wednesday, 9 September 2015

Public Comment Welcomed on South Africa’s Cybercrimes Bill


South Africa, Cybercrimes and Cybersecurity Bill, public comment, freedom of expression, legislation, Africa
South Africa's draft Cybercrimes and Cybersecurity Bill is open for debate.
“Cybercrime perpetrators no longer require complex skills or techniques." 


“The potential impact of a malware is limited only by the skills, resources and imagination of the programmer who creates it." 


“User interaction with computer devices produces a wealth of computer generated digital traces."


Bleak is the picture painted of the current state of South African cybersecurity by the discussion document accompanying a draft of the country’s 2015 Cybercrimes and Cybersecurity Bill. If length is any indication of necessity, then the 128-page bill and its accompanying 80-page discussion document are proof that such legislation is long overdue. 

The Bill addresses previous cybercrime loopholes with measures such as clause 13, which reverses the notion that immovable property cannot be stolen. It also establishes much-needed critical infrastructure: a Cyber Security Centre (clause 52), a Government Security Incident Response Team (clause 53), a Cyberwarfare Strategy (clause 55), a Cybersecurity Hub (clause 56) and a National Critical Information Infrastructure Fund (clause 59). 

Regardless, several clauses of the Bill extend well beyond cybercrime protection and into an ambiguity that invites infringement upon freedom of expression and the right to privacy. Our main concerns include:

According to the Bill, possessors of software and hardware tools that could be used to commit cybercrimes are guilty unless proven innocent:

Clause 6(3): Any person who is found in possession of a software or hardware tool in regard to which there is a reasonable suspicion that such software or hardware tool is possessed for the purposes of contravening [certain provisions], and who is unable to give a satisfactory exculpatory account of such possession, is guilty of an offense.

The Bill broadly defines terrorism and consequently limits free speech for internet users. The discussion document acknowledges that South Africa’s Constitution prohibits the freedom of expression that many nations enjoy:

Clause 15(5): For purposes of this section, “computer related terrorist activity” means…that which is intended, or by its nature and context, can reasonably be regarded as being intended, in whole or in part, directly or indirectly, to— (i) threaten the unity and territorial integrity of the Republic; (ii) intimidate, or to induce or cause feelings of insecurity among members of the public, or a segment of the public, with regard to its security, including its economic security, or to induce, cause or spread feelings of terror, fear or panic in a civilian population; or (iii) unduly compel, intimidate, force, coerce, induce or cause a person, a government, the general public or a segment of the public, or a domestic or an international organisation or body or intergovernmental organisation or body, to do or to abstain or refrain from doing any act, or to adopt or abandon a particular standpoint, or to act in accordance with certain principles.

Clause 17(1-3): Any person who unlawfully and intentionally— (a) makes available, broadcasts or distributes; (b) causes to be made available, broadcast or distributed; or (c) assists in making available, broadcasts or distributes, through a computer network or an electronic communications network, to a specific person or the general public, a data message which advocates, promotes or incites hate, discrimination or violence against a person or a group of persons, is guilty of an offence. (3) For purposes of this section “data message which advocates, promotes or incites hate, discrimination or violence” means any data message representing ideas or theories, which advocate, promote or incite hatred, discrimination or violence, against a person or a group of persons, based on— (a) national or social origin; (b) race; (c) colour; (d) ethnicity; (e) religious beliefs; (f) gender; (g) gender identity; (h) sexual orientation; (i) caste; or (j) mental or physical disability.

The Bill sets in place a mechanism to search for, access and seize articles without a warrant:

Clause 30(1): An application referred to in section 29(1)(a), or an application for the amendment of a warrant issued in terms of section 29(1)(a), may be made orally by a specifically designated member of a law enforcement agency, if it is not reasonably practicable, having regard to the urgency of the case or the existence of exceptional circumstances, to make a written application. 

Clause 32(1): (1) On the arrest of any person on suspicion that he or she has committed— (a) an offence under this Act; or (b) any other offence, a member of a law enforcement agency may search the arrested person and seize any article referred to in section 28 which is in the possession of, in the custody of or under the direct control of, the arrested person.

The Bill calls for Internet Service Providers to preserve data traffic and stored information when requested. The discussion document acknowledges this and similar measures as attempts “to bring the law of the day in line with the international position regarding the investigation of cybercrime,” a position that frequently finds itself under attack:

Clause 40(3): An expedited preservation of data direction must direct the person or electronic communications service provider affected thereby, from the time of service of the direction, and for a period of 120 days— (a) to preserve the current status of; (b) not to deal in any manner with; or (c) to deal in a certain manner with, the data referred to in the direction in order to preserve the availability and integrity of the data.

Public comment on the Bill is welcome until November 30 via mail, email, fax or in person; further information is available at http://www.justice.gov.za/legislation/invitations/invites.htm.

Exercise your rights, surf secure and stay Rando!