Sunday | 7 September, 2008
CIO
Feds tout malware as Australia's biggest cyber threat
Inside the Australian High Tech Crime Centre’s war on cyber crime.
Andrew Hendry (Computerworld) 30 April, 2008 14:27:46

AHTCC Director James McCormack (standing) with AFP Operations Coordination Centre member Ben Wilkinson (seated)
AHTCC Director James McCormack (standing) with AFP Operations Coordination Centre member Ben Wilkinson (seated)
Related Features
  • +

    Government seeks to ban more websites 22 September, 2007 03:59:35

    The bill was tabled in the Senate at 9:58am on Thursday, without notice.
    The Australian Government has tabled a bill that will increase the power of police to ban websites that they deem crime or terrorism related.
Related Stories
  • +

    Government seeks to ban more websites 22 September, 2007 03:59:35

    The bill was tabled in the Senate at 9:58am on Thursday, without notice.
    The Australian Government has tabled a bill that will increase the power of police to ban websites that they deem crime or terrorism related.
Additional Resources

McCormack believes phishing scams are so successful because of the blanket policy criminals adopt when looking for victims. They don't try and scam a single person, business or organisation out of one significant lump sum, but rather target a high volume of low dollar victims.

"I think the figure is about 90 billion emails per day. A huge percentage of those are spam and a significant proportion of that spam contains links to malicious software. When you're putting that much volume of traffic out you only need .001 percent to actually expose themselves and lose a small amount of money [each], and the criminals get a vast sum."

In terms of origins of threats, McCormack said Australia does not boast many cyber criminals, largely due to effective cyber crime laws, co-operation between federal, state and territorial law enforcement agencies, and a keenness to prosecute these types of crimes.

What the AHTCC does see in terms of Australian-based cyber criminals is a lot of lower level people who get involved in phishing and other scams, such as muling, to make a quick buck (see picture attached).

"They understand what they are doing is illegal - if you answer a job advert on the Internet which indicates that you can make $2000 a week just for two hours work, and you start transferring funds to some guy in Eastern Europe and getting $500 commission, then there must be something not right about it," McCormack said.

While the AHTCC sees these kinds of opportunistic local cyber criminals as just one small cog in the wheel, it is viewed as criminal activity nonetheless and will be prosecuted.

"There was a case just recently in Brisbane where the lady involved received a 15 month sentence."

In McCormack's view, the jewel in the AHTCC's crown is the Joint Banking and Finance Sector Investigation Team: a collection of representatives from law enforcement, major banks and financial services, and smaller financial institutions represented through Abacus, working close together to combat cyber crime in the financial sphere.

"That team has a vast and enormous number of successes every single day, and I recently had them start to record this visibly. As they walk out each night there is a big whiteboard near the door that lists all the phishing sites they've taken down, the number of interviews conducted with people involved in muling scams, and the number of operational activities they have running at any one time.

"It's just a visible reminder each time they walk out the door that 'hey, we've kicked some goals today', and we can only do that via the cooperation with industry and our other counterparts in states and territories."

For more information on how not to be become a victim of cyber crime, visit the AHTCC or ScamWatch Web sites.

Market Place
 

2008 CIO Summit

19th August, 2008 Four Seasons Hotel, Sydney Developed in partnership with CIO Magazine, IDC, INTEP and the CIO Executive Council.

The world of the CIO is extremely complex and diverse. Multiple priorities demand attention and decisions are needed instantly. Individual teams need to be driven towards common goals, and businesses strive to become more mobile, agile and responsive. For CIOs, the challenge never ends.

Every year the CIO Summit identifies what is top of mind for CIOs across Australia and New Zealand, and offers insight for CIO benchmarking and vendor strategic planning alike.

Recent IDC research shows that over 59% of CIO's believe that 'to achieve their business strategies, technology should be used more aggressively than today.'

Join us on August 19th to discover how this is possible with the latest technologies including Virtualisation, Web 2.0, IP Surveillance and Software as a Service (Saas).

Click here for registration.

Click here for more information.

Please email Denyse_Robertson@idg.com.au for further information.

  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    Information security governance: Centralized vs. distributed 05 September, 2008 10:15:00

    Should security policies, procedures and processes be managed within a central body, or distributed at an individual level? You need to find the middle ground.
    The management of information risk has become a significant topic for all organizations, small and large alike. But for the large, multi-divisional organization, it poses the additional challenge of determining how to deploy an information security governance program among what are often disparate business units. Should the policies, procedures, and processes that define the program be developed and managed within a central, corporate body? Or perhaps responsibility would be better placed at the individual unit level? Is there a workable middle-ground?
  • +

    DNS error brings Sophos antivirus updates to a halt 05 September, 2008 13:40:00

    Optus, Internode and Equinix affected among others.
    A sporadic Domain Name Server (DNS) error has blocked Sophos anti-virus updates around the world.
  • +

    Ouch! Security pros' worst mistakes 04 September, 2008 08:05:00

    We've all done regrettable things on the job, but does any valuable wisdom come of it? Four security pros candidly explain their biggest blunders and what they learned in the process
    It was a mistake so bad the person who made it asked that his name and company not be mentioned here. Let's call him Frank.
  • +

    Security ROI: Fact or Fiction? 03 September, 2008 08:32:00

    Bruce Schneier says ROI is a big deal in business, but it's a misnomer in security. Make sure your financial calculations are based on good data and sound methodologies.
    Return on investment, or ROI, is a big deal in business. Any business venture needs to demonstrate a positive return on investment, and a good one at that, in order to be viable.
  • +

    Information Security and the Importance of Context 01 September, 2008 10:00:00

    Those entrusted with information security must raise their contextual awareness
    When the US Transportation Security Administration (TSA) was first created, it created a sudden need for tens of thousands of screeners. Getting a job as an airport screener was a pretty easy process. It seemed as though if you had a pulse, you were in. Jump forward to 2008 and becoming a screener is a bit harder as the TSA has instituted background checks, has upped the educational requirement to include a high school diploma or GED, and added other significant requirements.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

Why Security SaaS Makes Sense Today

Corporate IT teams are waging a significant security battle on two fronts these days: stopping attacks via the Web and through email. Security SaaS can solves these problems and more. Read on to discover 7 reasons why security SaaS makes sense for your business.

Sponsored Links