CybercrimeCybercrime

A Global Overview of the Role of A Global Overview of the Role of Internet Service Providers in assisting Internet Service Providers in assisting Law Enforcement and Public Safety Law Enforcement and Public Safety

efforts.efforts.

How ISP’s are How ISP’s are criticalcritical to to worldwide Law worldwide Law

Enforcement and Public Enforcement and Public Safety efforts.Safety efforts.

SSA Donald R. CodlingSSA Donald R. CodlingFBI Cyber DivisionFBI Cyber Division

SSA Wilfred RattiganSSA Wilfred RattiganFBI Legal Attache Pretoria South AfricaFBI Legal Attache Pretoria South Africa

African Undersea CablesLatest update: 17 Aug 2010

                                                                                                                                                                                                                                                                           

BUT since we are dealing with BUT since we are dealing with human beings-LETS NOT human beings-LETS NOT

FORGET…FORGET…

• The Seven Deadly sins of Anger, Greed, Envy, Sloth, Pride, Gluttony and Lust all exist in the ‘online’ world and have been accelerated and magnified……basically the GLOBALIZATION OF CRIME over the Internet has occurred.

Major Types of Cyber criminal Major Types of Cyber criminal activity in Africaactivity in Africa

• Cyber Fraud, particularly targeting consumer banking, hijacked business funds transfers and ‘carding’ software installed at cyber cafes or on ISP servers which drives internet credit card fraud in Africa.

• Fee for service scams, internet auction scams, fake ticket sites, fake banking and fake online retailer sites, many crimes that would be difficult to perpetrate face to face on a massive scale…the list is endless with many African victims!

Cyber criminal cases investigated by our African Law Cyber criminal cases investigated by our African Law Enforcement partners.Enforcement partners.

• Algeria-working closely with Spain on major internet fraud ring.

• Egypt-Operation Phish Fry- arrests, 46 Million U.S. Dollars in losses. Followup on more subjects.

• Morocco-dismantled a huge counterfeit bank card ring using the internet , combating government website defacement

• Nigeria-Hundreds of Advance Fee Fraud cases under investigation

• South Africa-November 2008-13 arrests in major organization, stole more than 400 million Rand.

The Virtual Jihad: Terrorist Use The Virtual Jihad: Terrorist Use of the Internetof the Internet

Exploitation of Internet-Based Exploitation of Internet-Based TechnologiesTechnologies

Why terrorists use the Internet• Fast• Easy access• Broad audience• Little or no regulation or censorship• Rich multimedia environment• Inexpensive• Anonymous• Internet is a battlefield in the Global War on Terrorism

Internet tools and services enhance terrorist capabilities• Communication• Command and control• Propaganda and psychological warfare• Radicalization and recruitment• Training• Operational planning• Fundraising

Top 10 Jihadist Web sitesTop 10 Jihadist Web sitesTop 10 Jihadist Web sitesTop 10 Jihadist Web sites

1. al-Faloja2. Al-Shamukh3. At-Tahaddi4. Al-Hanein5. Al-Medad6. Alqimmah-Golaha Ansaarta Mujaahidiinta7. Al-Ma’ark8. As-Ansar9. The Najahden Electronic Netwrok10.Al-Luyuth al-Islamiyyah

Bismillah,

In sha'a Allah I will keep these things going with beneficial points for countering counter terrorism efforts. There are some things that obviously will not be said, because only a few people need to know them and it is harmfulfor CT officials to have a heads up on what is going on. However, there are some things which they already know, or which they cannot do anything about, or which the Muslims have significantly greater capabilities to counteract anything CT officials can come up with.

As things stand, we are currently dominating nearly every front in this war, but we are neglecting the true potential of this movement by allowing it to continue with almost no direction whatsoever. Al-Qa'ida does what they can to direct things, but it is not so easy when you are fighting a physical war at the same time. Also, we are much more aware of our own situation than they are, simply due to the fact that we are here and they are fighting jihad already.

FBI Counterterrorism Internet Unit FBI Counterterrorism Internet Unit Coordinates significant FBI, INTERPOL investigations of Internet forums, websites, used to launder funds supporting terrorist activities.

• central point of contact representing the FBI with International Internet Service Providers and International Law Enforcement Partners.

• Helps give strategic direction and overview in identifying, penetrating and dismantling terrorists use of the Internet.

• Addresses the need recognized world wide by Law Enforcement and Public Security agencies of the mounting challenges involved in coordinating large-scale jihadist internet forum investigations.

• The jihadist web space is too large to target on an ad hoc basis and requires considerable levels of coordination and deconfliction, both domestically and internationally.

• ISP’s globally are the business record holders, the log file holders and technical subject matter experts often in the best position to assist law enforcement efforts.

• Contact your Countries National Police Agency, Regional FBI Legal Attache office or INTERPOL with questions or concerns.

Recent Joint law enforcement investigations in Africa with a Recent Joint law enforcement investigations in Africa with a significant cyber componentsignificant cyber component

• Rwanda-Working closely with Ugandan officials.• Kenyan- ATPU working closely with Ugandan officials.• Algeria- Working closely with Moroccan and

French officials.• Egypt- Working closely with US and United

Kingdom officials.• South Africa-Working closely with US and United

Kingdom officials…..• All these cases require active ISP assistance to

locate the subjects and bring them to justice….• ***and this is just this week!!***

None of these types of Investigations can be None of these types of Investigations can be brought to a successful conclusion without brought to a successful conclusion without

the ISP’s assistance!the ISP’s assistance!

• The availability of IP address logs, with accurate time and date stamps is of critical importance to investigators.

• Having a contact name, physical address and telephone number at an ISP (preferably a mobile number or 24 hour contact number) is invaluable in emergency situations !

Single Most Helpful ISP StepSingle Most Helpful ISP Step

• Join the established group of 8 (G8)- 24 hour/7 day a week network contact list via your national police agency or Justice ministry!!!

• over 50 countries presently, used to request of ISP’s technical assistance, to request preservation of data and to provide a recipient point of contact for legal process.

• National Police forces or Justice Ministries in Mauritius, Morocco, Nigeria, South Africa and Tunisia are currently members. They are the liaisons for global law enforcement requests-so the ISP’s need to know them ‘locally’.

• To maximize participation, an ISP needs the following-

1-Either English or French speaking POC.2-Contact point available 24 hours day-7

days per week.3-Technically Knowledgeable person

working at the ISP physical plant.4-A person knowledgeable about domestic

laws and policies.If the ISP DOES NOT HAVE all of these,

that is NOT a problem-WE WILL HELP!!

African FBI Legal AttachesAfrican FBI Legal AttachesAlgiers, Algeria

FBI Legal attache offices and countries covered by each attache officeFBI Legal attache offices and countries covered by each attache office• Cairo, Egypt

American Embassy: 011-202-797-3300Nations covered: Egypt, Libya, and Sudan

• Dakar, SenegalAmerican Embassy: 011-221-823-4296Nations covered: Burkina Faso, Cape Verde, Central African Republic, Cote D'Ivoire, Democratic Republic of Congo, Gabon, Gambia, Guinea, Guinea Bissau, Republic of Congo and Senegal

• Freetown, Sierra LeoneAmerican Embassy: 011-232-222-26481Nations covered: Liberia, Sierra Leone

• Lagos, NigeriaAmerican Consulate: 011-234-1-261-0050 Nations covered: Benin, Cameroon, Equatorial Guinea, Ghana, Nigeria, Sao Tome' and Principe, and Togo

• Nairobi, KenyaAmerican Embassy: 011-254-20-363-6000Nations covered: Burundi, Kenya, Rwanda, Somalia, Tanzania, and Uganda

• Pretoria, South AfricaAmerican Embassy: 011-27-12-431-4000Nations covered: Angola, Botswana, Comoros, Lesotho, Madagascar, Malawi, Mayotte, Mauritius, Mozambique, Namibia, Reunion Islands, Seychelles, South Africa, Swaziland, Zambia, and Zimbabwe

• Rabat, MoroccoAmerican Embassy: 011-212-3776-2265Nations covered: Chad, Mali, Mauritania, Morocco/Western Sahara, Niger, and Tunisia

Reference materials and Points of Reference materials and Points of Contact within Africa for Internet Contact within Africa for Internet

Governance issuesGovernance issues• List of Internet Corporation for Assigned Names

and Numbers (ICANN) Government Advisory Council Representatives-hard copy provided.

• ICANN African Regional Relations Manager Anne Rachel Inne-

• Email- anne-rachel.inne@icann.org• Letters of Support by INTERPOL, Council of

Europe and G-8 for Law Enforcement recommendations-hard copy provided.

• Letter of Support from ICANN Government Advisory Counsel-hard copy provided.

AFRINIC Subject matter expertsAFRINIC Subject matter experts• Anne Rachel Inne-ICANN African Regional

Relations - anne-rachel.inne@icann.org• Adiel Akplogan-AFRINIC CEO- adiel@afrinic.net• Lillian Sharpley-AFRINIC -lillian@afrinic.org• AFRINIC will be forming a Law Enforcement

working group with ISP representation and input VERY welcome!!!

• ***AFRINIC-13 Public Policy Meeting  will be held in Johannesburg, South Africa from 20-26 November 2010. ***

African Law Enforcement Cyber Crime Subject Matter African Law Enforcement Cyber Crime Subject Matter Experts-people I have personally worked with.Experts-people I have personally worked with.

• South African Police Service Colonel Beaunard Grobler-

ccu@global.co.za

• Mauritius Police Force Inspector Narayan Gangalaramsamy- narayan10@yahoo.com

• Nigerian Economic and Financial Crimes Commission Chairwomen Farida Waziri-fwaziri@efccnigeria.org

FBI Legal Attache in PretoriaFBI Legal Attache in Pretoria

• Physical address-American Embassy, 877 Pretorius St., Arcadia.

• Mailing address-P.O. 9536, Pretoria 0001, South Africa

• Phone number-27-12-431-4014

• Legal Attache Wilfred Rattigan

• Assistant Legal Attache Barry Ross

• Assistant Legal Attache Anthony Velaquez

Globally, Law Enforcement and Globally, Law Enforcement and Public Safety authorities cannot Public Safety authorities cannot

succeed without the active succeed without the active support, cooperation and support, cooperation and

technical assistance of the technical assistance of the Internet Service Provider Internet Service Provider

Community.Community.