Their newest target is right in our hands: our cell phones.

Complaints of cybercrime topped 314,000 in 2011 — up 3.4 percent from the prior year, according to a report issued Thursday by the Internet Crime Complaint Center, a partnership of the FBI, the National White Collar Crime Center and the U.S. Department of Justice.

Online crime occurs in varied forms, from identity theft that uses personal information to commit fraud, to phony job schemes involving bad check deposits, to “romance scams” that seduce the lovelorn to send money to a pseudo-suitor. Nationwide, the average victim who filed a complaint last year was duped out of $4,187, reported the Internet complaint center.

The FBI said the most common scams are identity theft, advance-fee and nondelivery scams. For instance, victims can be defrauded on Craigslist by sending money for items that never arrive or by applying for job offers that involve wire transfers of phony checks.

Cybercrime is thought to be a much larger problem than the numbers released Thursday suggest. Internet crime is “grossly underreported” nationally, said William Hinerman, the crime center’s unit chief. “We know there are tens of millions of computer users in the United States, and everybody who gets email gets spam.”

In announcing the annual Internet crime statistics, the center’s deputy director, Ken Brooks, said he was excited by the increase in complaints because it means more Americans are aware of online crime and realize they have somewhere to report it.

California, the nation’s most populous state, posted the highest total number of Internet crime complaints last year, with 34,169. Next came Florida, then Texas, New York and Ohio.

On a per-capita basis, however, California was No. 13 in the nation. Based on complaints per 100,000 population, the most fraud was reported in Alaska, the District of Columbia, New Jersey, Nevada and Colorado.

California ranked last in reported losses per 100,000 population, at $14.73. That compares with Washington, D.C., which was No. 1 with $1,119.70 in losses per 100,000 people.

While cybercrime has been around for years, the newest frontier for scam artists is mobile phones, the Internet crime center said.

It’s fertile territory. According to a recent Pew survey, about 83 percent of U.S. adults have a cellphone. An estimated 42 percent of those have smartphones that can access email and the Internet.

Michael Parker, a retired rancher in Sacramento, Calif., has already seen cyber-thieves sneak onto his T-Mobile cellphone. Last month, he had two text messages, purportedly from Wal-Mart, declaring he’d “won” a $1,000 gift card. To claim his prize, he was instructed to click on a website.

Parker didn’t bite. “Being a cynic helps,” he said. “I’m not a Walmart shopper, so that was one tipoff it was a scam.”

Instead of clicking on the link, he called a local Walmart manager to ask if the discount chain was giving out gift certificates by cellphone. The manager, Parker said, was “shocked, dismayed and not happy” to hear about the attempted scam, which likely was an attempt to install malware on Parker’s computer or trick him into giving out bank account or other financial information.

Parker also reported the phony texts to the Sheriff’s Department and signed up his cellphone for the national “Do Not Call” registry at www.donotcall.gov .

Romance scams proved especially lucrative for scammers last year, according to complaint center statistics. At a rate of 15 complaints a day, the scams saw reported losses of roughly $138,000, or more than $5,700 every hour. The average victim’s loss: $8,900.

How can you protect yourself from being swindled? The FBI’s Bryant said individuals should “never give out any personal or financial information over the phone or Internet, unless he or she has personally initiated the communication.”

Do your homework to verify the source of any online offers or official-sounding requests for your personal account information. In general, be skeptical of anything that sounds too good to be true.

Cyber-thieves increasingly aiming at cellphones.

Nichole Michelle Merzi, 26, of Oceanside, was sentenced in the fraud case by Senior United States District Judge Terry J. Hatter, Jr.

After a six-week trial last year, Merzi was found guilty of bank and wire fraud conspiracy, aggravated identity theft, computer fraud conspiracy, and money laundering conspiracy charges.

Along with her then-boyfriend—Kenneth Joseph Lucas, II—Merzi was a lead defendant named in an indictment returned in the fall of 2009 as part of Operation Phish Phry, a multinational investigation conducted in the United States and Egypt that led to charges against 100 individuals—the largest number of defendants ever charged in a cybercrime case. As a result of Operation Phish Phry, 47 people have been convicted in federal court in Los Angeles. Lucas was sentenced in 2011 in two federal cases—one stemming from the phishing scheme and one from a indoor marijuana grow operation that he constructed—to a total of 13 years in federal prison (see: http://www.justice.gov/usao/cac/Pressroom/2011/092.html).

Operation Phish Phry revealed how Egyptian hackers obtained bank account numbers and related personal identification information from bank customers through phishing—a technique that involves sending e-mail messages that appear to be official correspondence from banks or credit card vendors. Bank customers who received the spam e-mails were directed to phony websites purporting to be linked to financial institutions, where the customers were asked to enter their account numbers, passwords, and other personal identification information. Because the websites appeared to be legitimate—complete with bank logos and legal disclaimers—the victims did not realize that the websites were not related to legitimate financial institutions.

Armed with the bank account information, members of the conspiracy hacked into accounts at two banks. Once they accessed the accounts, the individuals in Egypt coordinated transfers of funds from the compromised accounts to newly created fraudulent accounts and other accounts used as part of the scheme. “Records at trial show that, from February 2008 through September 2008, defendant [Merzi] opened numerous BOA [Bank of America] accounts in her name at a variety of branches, and the amount of unlawful ‘phishing’ transfers into those accounts alone was $14,000,” prosecutors wrote in a sentencing memorandum filed with the court. From October 2008 to early 2009, Merzi and Lucas also had the individuals in Egypt make unlawful transfers from phished accounts to other fraudulent accounts opened in Southern California and elsewhere.

The United States part of the ring was overseen by Lucas, who directed associates to recruit “drops” to set up and use bank accounts where stolen funds could be held. A portion of the illegally obtained funds were transferred via wire services to the Egyptian co-conspirators. When Lucas was sentenced, a federal judge determined the total amount of intended loss in the case was more than $1 million.

“The harm done by [Merzi]’s activities is undisputed,” according to the goverment’s sentencing memo. “Although BOA and Wells Fargo reimbursed the individual victims whose accounts were compromised, it is undeniable that the scheme affected a large number of victims,” given that the illegal phishing transfers “occurred in amounts around $1,000 at a time.”

Marzi has been in custody since she was found guilty at trial in March 2011.

The investigation in the United States was conducted by the Federal Bureau of Investigation, which received support from the Electronic Crimes Task Force in Los Angeles and the Social Security Administration’s Office of Special Investigations.

FBI — SoCal Manager of International Computer Hacking Ring Sentenced to Five Years in Federal Prison for Defrauding Banks.

Disturbing web searches and downloads from his laptop were kept from the jury that still convicted him of the murder of eight-year-old Victoria (Tori) Stafford. The exclusion had to do with the search warrants police had obtained for his two addresses, which did not separately cover his laptop. The move reflected an emerging point of law that computers and other digital devices contain so much personal data that police need special permission to sift through them.

It’s the latest in a stream of cases that illustrate the legal world’s struggle to adapt long-held principles to a rapidly changing digital age. Judges, police and lawyers are facing a shifting legal landscape as the justice system grapples with the question of when and whether the vast amounts of data stored on computers and smartphones can be used in court.

At issue is how to preserve constitutional rights to privacy and to the protection from unreasonable searches in the face of the exponential growth in valuable data that now sits on your iPhone or laptop for the taking.

Every e-mail or text you send, everything you buy or search for online, is silently filed electronically. The question of who can use that information extends into almost every possible court fight, not just high-profile criminal trials: wrongful dismissal cases, insurance claims and child-custody battles. And it is an area of the law that is shifting quickly, although not as quickly as the technological change driving it.

The ruling that excluded Mr. Rafferty’s laptop followed a 2009 decision in the trial of Chris Little, a Markham man charged with a double murder, that faulted police for failing to obtain a second warrant to examine the contents of his cellphone, which they had seized from the murder scene. At the core of both cases is the notion that a laptop or smartphone, because of its vast stores of data about every portion of its owner’s life, is not just another object that can be picked up in a police search. It is now legally considered another “place” to be searched, and police must be specific about the information they are seeking there.

“You can see them as portals to vast amounts of information,” said Abby Deshman, a lawyer with the Canadian Civil Liberties Association. “The privacy implications of giving police an untrammelled right to sift through personal details on a home computer are quite vast.” Ms. Deshman points out that police can still get access to a suspect’s computers and smartphones – they just have to get proper warrants, proving that they believe relevant evidence is there to be found.

Other cases that confront new problems are working their way through the system. The Supreme Court of Canada is poised to hear a challenge of an Ontario Court of Appeal ruling that said a high-school teacher from Sudbury, Ont., was entitled to a right to privacy on a work-issued laptop where it is alleged that nude pictures of an underage student were found. The appeal court ruling appeared to upend an established notion in employment law that work computers and cellphones, and the data on them, are the property of the employer.

Meanwhile, the case of a Toronto man accused in a gunpoint robbery is headed to the Ontario Court of Appeal, as the defence tries to have photos from the man’s cellphone – seized by police when he was arrested – thrown out. And last year, the province’s appeal court ruled that the Crown could pursue charges based on child pornography found on a seized computer, despite the fact that the initial search was in connection with fraud allegations.

High-profile cases have been vexing U.S courts as well. Just this week, a New Jersey court ruled that a trucker accused of smuggling marijuana did not have to hand over his BlackBerry password to police, although a recent federal court ruling allows police to search cellphones without a warrant. The New York Court of Appeal also ruled this week that merely viewing child pornography online was not the same as possessing it, throwing out a conviction.

The law may differ on both sides of the border, but one thing is clear: The courts are in a constant state of rewriting the rules.

“I don’t think it’s about reinventing the wheel. I think courts are going to have to adopt … a ‘living tree’ approach, where they revisit all these questions in light of dynamic change,” said University of Ottawa law professor Karen Eltis, author of Courts, Litigants and the Digital Age.

Having the government try to legislate new rules would be pointless, she adds: “By the time the ink dries, and the political compromises are reached, the law is probably outdated.”

Courts grapple with how to use computer data as evidence – The Globe and Mail.

With a mountain of circumstantial evidence to consider, the twelve jurors who convicted William Balfour on Friday said they needed to understand the chain of events in order to see the case more clearly. They were able to do that, they said, with testimony from a forensic investigator who helped triangulate the location of Balfour’s phone on the morning that Oscar-winning actress Jennifer Hudson‘s mother and brother were found slain.

“Once we were able to piece the timing together, where we realized that he could not be at two places at one time… We were able to put a timeline together,” said juror Paula Holcomb “At such and such a time he was here, at such and such a time he was here, at such and such a time the phone was no where on the radar.”

Jurors deliberated for three days before reaching their verdict against Balfour, a former gang member who was the estranged husband of Hudson’s sister at the time of the murders.

Just an hour before their unanimous verdict on all counts, they sent a note to the judge that three jurors still weren’t fully convinced of his guilt.

“There were three of us who just needed to see the picture a little clearer,” said juror Jacinta Gholston.

Jurors told reporters afterward that their deliberations were thorough and cordial, and that Jennifer Hudson‘s celebrity didn’t influence them.

“This wasn’t a case about Jennifer Hudson for us,” said Gholston. “This was a case about William Balfour, and so for us her celebrity really had nothing to do with it. It’s unfortunate that it was her family, but this was not, for us, the Jennifer Hudson case. This was the people of Illinois against William Balfour.”

The jury foreman said he hoped the verdict would bring Hudson closure.

“I hope she can put this thing behind her and get on with the rest of her life,” Robert Smith, a 47-year-old employee at Chicago Public Schools told reporters outside court.

The jurors said the case was a difficult one to consider and conceded that they even felt sorry for the man whose fate they held in their hands. Balfour’s 31st birthday was Thursday.

“Some of us tried to make him innocent, but the facts and everything just wasn’t there. We tried. That’s what took us so long. We had to pick everything apart. … at some points we all did feel sorry for him,” said juror Tracie Austin.

For Hudson Jurors, Cell Phone Forensics Were Key | NBC New York.

Llanelli Town Council‘s website was hacked and during the period showed the Libyan flag, the Llanelli Star reported.

The council is hiring experts to try and establish where the attack originated, as well as finding out if any electronic evidence has been left behind by the hackers.

“I would like to identify if any information has been secured by the hackers and will refer the matter to the police if it has been,” council leader Carl Lucas told the source.

He explained that he did not believe the council were the only site to be targeted but sought to put minds at rest by stating there were no personal detailed collected or stored on the website.

When files are accessed it lays down a digital footprint that can be used as evidence.

Electronic Evidence Could Track Down Hackers | DFI News.

Khoo Boon Hui, president of the global police network, told a conference of 49 European member states that cyber crime is becoming more transnational. He pointed to a study published in March by the London Metropolitan Univ. that found 80 percent of online crime is connected to cross-border organized gangs.

“Organized crime is now able to recruit members from countries without diplomatic ties to commit crimes overseas operating from temporary safe bases in third countries equipped with the latest technology,” he said.

Hui said Malaysian police last month arrested more than 200 cyber criminals from China and Taiwan who operated online scams through two syndicates under the instructions of a common Taiwanese boss.

By using temporary safe bases around the far East, the online scammers netted billions of dollars via soccer and gambling websites along with credit card and bank fraud schemes, he said. He said hackers even penetrated the Interpol website this year.

Hui said cyber crime costs Europe about 750 billion euros, or more than $977 billion, a year. Israel alone deals with more than 1,000 Web attacks a minute, he said.

To help train police worldwide in online law enforcement, Hui said Interpol will open a cyber crime and digital security complex in Singapore in 2014.

This week’s conference also addressed other issues including international terrorism, the drug trade and human trafficking.

Source: The Associated Press, Daniella Cheslow

Interpol to Crack Down on Cyber Crime | DFI News.

GEELONG police are being called to investigate cases of cyber bullying among school-aged children just months after the term became a chargeable offence.

Inspector Gary Thompson confirmed police were currently investigating “several” online bullying cases.

It follows news Geelong police are being called to schools weekly to educate children as young as five on the dangers of cyber bullying.

Leading Senior Constable Robbie Noggler said he had visited more than 20 schools this year in an attempt to tell kids how to avoid trouble online.

He said students at both primary and secondary schools needed to know the legal implications now involved in cyber crime.

“In June 2011 legislation came in to put cyber bullying under stalking provisions so it’s now a chargeable offence. That means any form of online bullying or impersonation can come to our attention,” he said.

Police probe school cyber bullying | Geelong, VIC, Australia.

A signature trait they share is the collecting and curating of a large store of images of children being sexually and physically abused.

The only positive aspect of these horrific caches is that they help police officers build a case. The downside is that it can take time to process the images because the collections can be huge. Some abusers hoard millions of them.

“Image triage is very important and it’s getting harder because storage is so cheap,” said Mick Moran, co-ordinator of the crimes against children unit at Interpol.

Analysing all the images was vital, he said, not just to ensure that the person caught was properly charged.

“The material has to be sorted through with a view to finding images that have not been seen before and require immediate attention.”

That novel material could reveal victims unknown to the police or lead to other abusers.

“60-90% of abuse takes place within the home or family circle,” said Mr Moran. “Once you find the child, you find the abuser.”

Find and filter

Technology is a big help when processing the mountains of images. At Interpol the sorting process is aided by a database made up of millions of images seized from abusers. That contains the raw images and each one has been processed to produce a mathematical summary known as a “hash”.

The caches of images built up by paedophiles can be extensive

The first stage of triage typically involves putting freshly seized images through the same hashing process. Old are then compared with new to reveal those not see before.

That is the theory. In practice it often proved to be a lot more complicated, said Fred Langford, director of technology at the UK’s Internet Watch Foundation.

“As soon as someone changes the size or flips it on its side it changes the hash,” said Mr Langford.

That was a bigger problem that it might otherwise be, he said, because images of child sexual abuse were so widely copied.

“We see the same images over and over again,” said Mr Langford. Websites selling images of abuse often added a logo, he said, which typically changed the mathematical summary or hash .

Many paedophiles who swapped and shared material knew to make tiny changes, such as altering the colour of a single pixel or altering a file extension, to stop the images being caught by scanning systems, said Alex De Joode, chief security officer at hosting firm Leaseweb.

Like many other web firms, Leaseweb processes images being uploaded to ensure they are not known illegal images.

“We host a lot of user-generated content sites,” said Mr De Joode. “These sites are being abused by people uploading child porn and it’s something that our customers do not want.”

Abusers needed places to post images, he said, because many of the other places they met online were text-only chat forums where only links, rather than images, could be posted.

Eyes right

Lists of hashes help the sorting process but their usefulness is limited by the changes regularly made to images.

An image-processing tool that can ignore those tiny changes and work out what other images it resembles has been developed by Microsoft researchers.

Instead of a hash, this creates what its creators call a “signature” for each image. Unlike a hash this signature does not change when an image is altered or manipulated.

“No matter how much it’s changed, the underlying properties of the image’s signature remain the same,” said Stuart Aston, chief security officer at Microsoft UK.

Called PhotoDNA, the tool was developed to keep an eye on images uploaded to other Microsoft services and Facebook and now, with the help of Swedish firm NetClean, is being given to police forces to help them categorise images.

NetClean has a long history of helping police forces process images in a bid to spot illegal material and catch abusers.

Human experience can prove better than technology in some investigations

Mr Langford said PhotoDNA would help with some aspects of image classification, and could speed up image triage so investigators had more time to spend on other tasks.

But, he said, there were times when there was no substitute for people looking through images to see what they could find.

“The most effective tool is experience,” said Mr Langford. “Analysts are skilled at spotting things that the software might not be able to recognise.”

Mr Moran from Interpol agreed, saying it was often only because experienced investigators worked on images that lives were saved and children were rescued from abuse.

When they look at images, investigators look for clues that reveal where they were taken. Food packets, plug sockets and household objects can all help police home in on a location.

In one recent case, said Mr Moran, the key object was a doll held by a child. Interpol shared the images – seized in Boston – via its connections to police forces in Europe because it was clear they pointed to a group of abusers never seen before.

The image was seen by a Dutch police officer who knew that the doll was only available in Holland. It was shown on the Dutch version of Crimewatch, with anyone who knew the child asked to come forward.

The shocked parents of the child contacted police, wondering where the image came from. Investigation showed that the image was taken at the child’s creche. The child was one of 87 being abused after being left for the day at one of several creches in Amsterdam.

The investigation helped police arrest 14 people who had either abused the children or taken photographs and shared them.

Technology and people can work together to catch abusers, said Mr Moran, but it would take more to stop the online trade altogether.

“As a result of the internet, latent paedophiles and people who could not care less are being exposed to child abuse material,” he said. “Because of that, more children are being abused to produce material that can be put online to feed the desire for more material.”

“We cannot police our way out of this,” he said. “This is a social issue not a police issue.”

BBC News – Catching paedophiles using image-processing technology.

Incoming search terms:

• technology abuse

David McKay, program coordinator for Blackstone Forensics, says he’s seen digital data extracted from cards that were stomped on, soaked and worse.

“These devices, which are solid state devices, they use a form of non-volatile memory and are very stable,” McKay said. “They’ve been frozen, dropped in puddles and left for days, they’ve been submerged in water and it’s been possible to pull information.”

Fifty-year-old William Jonathan Orders allegedly swallowed a card from the Drift camera mounted on his tandem glider after passenger Lenami Godinez-Avila detached mid-flight and fell to her death on Saturday.

Mounties believe the card may contain video footage that will shed light on the cause of the tragic accident, and revealed Wednesday that X-rays reveal an object similar to it remains in his body.

McKay said he’s never seen a memory card that spent almost a week in a human digestive system, but it’s likely that at least portions of the video or images stored on the device will be retrievable.

How long the card potentially spent in the stomach, where it would be exposed to corrosive acids, will factor in to how much information is useable, he added.

“Once it makes it to the digestive tract, much of the moisture is absorbed,” McKay said.

“At the end of the day, this will be a very interesting case study.”

The allegedly consumed card is either a pill-sized microSD card or a stamp-sized standard SD card, depending on Orders’ camera model.

Godinez-Avila received her hang gliding trip as an anniversary present from her boyfriend, who was filming the experience before she plummeted 300 metres to her death. She was 27 years old.

The Hang Gliding and Paragliding Association of Canada has suspended Orders’ instructor certification pending the outcome of an internal investigation.

The pilot has 16 years’ experience as a glider and is the owner-operator of Vancouver Hang Gliding.

He has been in custody since the accident and charged with obstructing justice for allegedly swallowing the memory device, with a bail hearing scheduled for Friday in Chilliwack provincial court.

Swallowed memory card data likely salvageable: expert | CTV British Columbia.

Incoming search terms:

• hang gliding accident memory card footage
• william jonathan orders

The company has been selected to deliver a full range of technical, functional, and managerial support to the DC3, which provides vital assistance in the investigation of criminal, counterintelligence and counterterrorism matters, as well as cyber security support to Defense Industrial Base partners. The work will be conducted through a task order awarded by the General Services Administration’s Federal Systems Integration and Management Center under the General Services Administration Alliant Contract. The task order has a ceiling value of $454 million if all options are exercised.

“DC3 faces compelling requirements for superior digital forensics and multi-media lab services, related research, development, test and evaluation, and cyber analytics,” said Steve Shirley, executive director of the Center in Linthicum, Md. “Responsive and capable industry mission partners are a significant feature of DC3’s operations. We’re looking forward to a smooth transition as Lockheed Martin becomes a key mission partner, and we’re confident the company’s capabilities will help us succeed in our future challenges.”

The Lockheed Martin team will bring to DC3 its extensive cyber analysis expertise gained through its role in protecting some of the most-sensitive information networks in the world. As the leading IT provider for the federal government 17 consecutive years (Washington Technology), Lockheed Martin also has executed many successful large contract transitions.

“As DC3’s new mission partner, we’re excited to assist the Center as it expands and advances its technical capabilities in support of DoD criminal investigative, counterintelligence, and counterterrorism organizations, and to help safeguard the networks of Defense Industrial Base partners,” said Gerry Fasano, president of Lockheed Martin Information Systems & Global Solutions-Defense (IS&GS-Defense).

Because of its size and importance, the DoD is targeted by cyber criminals ranging from terrorists to spies to identity thieves. “Our industry team provides solutions to address a cyber threat environment that is highly dynamic and growing in volume and complexity,” said Dr. Rohan Amin, DC3 program director for Lockheed Martin IS&GS-Defense. “We recognize the uniqueness of the mission and look forward to working with DC3 to address these future challenges.”

Lockheed Martin’s scope of work will include digital and multimedia forensics examination, analysis, research, development, test and evaluation, information technology and cyber analytical services. The primary work will be conducted at DC3 headquarters in Linthicum, Md.

Headquartered in Bethesda, Md., Lockheed Martin is a global security company that employs about 123,000 people worldwide and is principally engaged in the research, design, development, manufacture, integration and sustainment of advanced technology systems, products and services. The Corporation’s net sales for 2011 were $46.5 billion.

Lockheed Martin · Lockheed Martin to Assist Department of Defense in Fight Against Growing Threat: Cyber Crime.