|
CONSUMER NEWS RECALLS COMPLAINT FORM SCAM ALERTS |
| Small Claims Guide | Class Actions | Lemon Law | FAQ | Resources | Newsletters | Spanish | |
|
|
![]() |
Identity Theft Supports a Vast Underground EconomyStudy Finds Cybercriminals Taking a More Professional Approach |
|||||
|
By Martin H. Bosworth March 20, 2007
That's one of the conclusions made by the Symantec security firm in its new "Internet Security Threat Report," released yesterday (pdf file). The Cupertino, California-based company analyzed multiple trends in security and computer crime, including phishing, data breaches, identity theft and fraud, and Trojan viruses. "Symantec has observed a fundamental shift in Internet security activity," according to an executive summary of the report's key findings. "The current threat environment is characterized by an increase in data theft and data leakage, and the creation of malicious code that targets specific organizations for information that can be used for financial gain." Among the report's findings: The United States had the dubious honor of hosting the largest percentage of "botnets," slaved computers controlled by hackers and used to send out spam and viruses to hit unwitting Internet surfers. The U.S. hosts 40 percent of the "command and control" networks that direct "bot" operations, followed by China at 26 percent. The U.S. also hosts 51 percent of servers known to host "underground economy" transactions, including the sale of credit card numbers for as little as $1 to $6 dollars, and sets of personally identifying information for $14. Symantec didn't have exact figures for the money changing hands in the underground economy, but the company estimated it in the hundreds of millions of dollars. Data breaches such as laptop thefts, hacks of stored data, and lack of security facilitate identity theft, due to the ease with which hackers can access personal and sensitive information in large quantities. 25 percent of data breaches studied in the Symantec report came from government agencies, as they "often store data in many separate locations making it accessible to various people, and thereby increasing the opportunities for attackers to gain unauthorized access." The "theft or loss" of a computer accounted for 54 percent of breaches related to identity theft in the six-month period between July 1 and December 31 that Symantec observed. The report warned against the "increasing professionalization" and sophistication of identity thieves, who increasingly work in organized groups and approach their criminal activities with business-level acumen, as well as the proliferation of personal information and the ease with which it can be used. "You can become a brand new American. It's frightening that it could be sold pre-packaged and ready to go like that," said Symantec Security vice-president Alfred Huger. The black market in sales of personal information is often geared to illegal and undocumented immigrants, who buy stolen identities in order to quickly get work. The Social Security numbers collected from workers with false or unverified identification go into a pool called the "Earnings Suspense File," while those who have had their identities stolen often remain unaware of the crime for years, until they receive bills or offers meant for the person using their information.The Department of Homeland Security (DHS) conducted several high-profile raids against companies that employed workers using fake identities, detaining them and in some cases separating them from their families, under the pretense of fighting identity theft. Most in the security industry felt the raids were ineffective and a distraction from the continuing proliferation of black market bazaars catering in stolen identities. The actual levels of identity theft are difficult to categorize, as the term encompasses a number of different types of fraud, much of which can go unnoticed and unreported. Research firms Javelin and Gartner have released studies claiming that identity theft is both on the decline and increasing. The Gartner study claimed that the selling of personal information led to the creation of "synthetic" identities, which are much harder to detect than typical forms of identity misuse. Report Your Experience
|
|
||||
Advertisement
|
Home |
Rogues Gallery |
Good Guys |
Complaint Form |
News |
Recalls |
Search |
Video |
FAQ |
|
Terms of Use Your use of this site constitutes acceptance of the Terms of Use
Copyright © 2003-2008 ConsumerAffairs.com Inc. All Rights Reserved. |