Interpol: Policing model needs to change with cybercrime
(2022/02/17)
- Reference: 1645124132
- News link: https://www.theregister.co.uk/2022/02/17/interpol_cybercrime/
- Source link:
The digitalisation of the global workforce in the face of a pandemic has led criminals to upgrade their working model, and now law enforcement must too.
Interpol cybercrime director Craig Jones set forward this idea at Acronis's #CyberFit Summit in Singapore on Thursday, dispelling the stereotype of a lone threat actor in a hoodie hunched over a keyboard in favour of an integrated criminal ecosystem.
When criminals go corporate: Ransomware-as-a-service, bulk discounts and more [1]READ MORE
"We are now looking at a business model. Because we've evolved, the criminals have evolved as well in our digital space," said Jones. "We see a whole criminal business supply chain as well, from people gaining illegal access to criminals offering ransomware as a service."
He added that cybercriminals now have a broad range of skills as well as access to their own colleagues with skills at low cost, in a borderless environment, as they attack not just some store or object, but day-to-day infrastructure.
Jones said that in order to tackle these ecosystems, law enforcement needs to move away from the traditional method that goes back thousands of years. He cited China's early local magistrates as a historic example.
[2]
"We sit locally in a police station, we get into a car, we patrol the streets in the communities," said Jones. "It's divided up into different stations, regions, areas, and we work and we police that local community. But police do not sit in that online community. We don't see what you've seen."
[3]Russia starts playing by the rules: FSB busts 14 REvil ransomware suspects
[4]Google launches lawsuit against a blockchain-enabled botnet
[5]European Cybercrime Centre confident it's kicked credit card crims – again
[6]You wanna use GCHQ offshoot NCSC's threat intel feeds? Why not, say bosses
Jones said one way forward was for law enforcement to share its data, presumably with other agencies outside individual jurisdictions. "In much the same way you as a community share data information between yourselves, law enforcement needs to do better," said the director.
"Geopolitical elements also impact our actions as well – the offensive efficiency of law enforcement to be able to take coordinated actions to prevent, detect, investigate and disrupt the cyberthreat actors. We're looking at a change in that policing model."
[7]
As a specific example of Interpol embracing this theory, Jones said the org would be growing its network, with the action operations database in Singapore expanding further into Asia and South Pacific.
"We also have that in the Americas region," the director said. "So working from the global, to the regional to the local."
[8]
The Register has more on how the attacker interprets normal incident response techniques [9]here ; a piece on what it's like to be a ransomware negotiator [10]here ; and a guide to keeping your job when the malware hits, [11]here . ®
Get our [12]Tech Resources
[1] https://www.theregister.com/2021/10/11/ransomware_as_a_service/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Yg7TmzyDYSUXl5t9WMh5OQAAANI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.theregister.com/2022/01/14/russia_revil_ransomware_gang_charged/
[4] https://www.theregister.com/2021/12/08/google_blockchain_botnet_lawsuit/
[5] https://www.theregister.com/2021/12/02/european_cybercrime_centre_carding_action_2021/
[6] https://www.theregister.com/2021/11/17/ncsc_annual_review/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yg7TmzyDYSUXl5t9WMh5OQAAANI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yg7TmzyDYSUXl5t9WMh5OQAAANI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2021/10/11/ransomware_as_a_service/
[10] https://www.theregister.com/2021/09/03/how_to_be_a_ransomware/
[11] https://www.theregister.com/2021/09/06/what_do_do_when_hit_by_ransomware/
[12] https://whitepapers.theregister.com/
Interpol cybercrime director Craig Jones set forward this idea at Acronis's #CyberFit Summit in Singapore on Thursday, dispelling the stereotype of a lone threat actor in a hoodie hunched over a keyboard in favour of an integrated criminal ecosystem.
When criminals go corporate: Ransomware-as-a-service, bulk discounts and more [1]READ MORE
"We are now looking at a business model. Because we've evolved, the criminals have evolved as well in our digital space," said Jones. "We see a whole criminal business supply chain as well, from people gaining illegal access to criminals offering ransomware as a service."
He added that cybercriminals now have a broad range of skills as well as access to their own colleagues with skills at low cost, in a borderless environment, as they attack not just some store or object, but day-to-day infrastructure.
Jones said that in order to tackle these ecosystems, law enforcement needs to move away from the traditional method that goes back thousands of years. He cited China's early local magistrates as a historic example.
[2]
"We sit locally in a police station, we get into a car, we patrol the streets in the communities," said Jones. "It's divided up into different stations, regions, areas, and we work and we police that local community. But police do not sit in that online community. We don't see what you've seen."
[3]Russia starts playing by the rules: FSB busts 14 REvil ransomware suspects
[4]Google launches lawsuit against a blockchain-enabled botnet
[5]European Cybercrime Centre confident it's kicked credit card crims – again
[6]You wanna use GCHQ offshoot NCSC's threat intel feeds? Why not, say bosses
Jones said one way forward was for law enforcement to share its data, presumably with other agencies outside individual jurisdictions. "In much the same way you as a community share data information between yourselves, law enforcement needs to do better," said the director.
"Geopolitical elements also impact our actions as well – the offensive efficiency of law enforcement to be able to take coordinated actions to prevent, detect, investigate and disrupt the cyberthreat actors. We're looking at a change in that policing model."
[7]
As a specific example of Interpol embracing this theory, Jones said the org would be growing its network, with the action operations database in Singapore expanding further into Asia and South Pacific.
"We also have that in the Americas region," the director said. "So working from the global, to the regional to the local."
[8]
The Register has more on how the attacker interprets normal incident response techniques [9]here ; a piece on what it's like to be a ransomware negotiator [10]here ; and a guide to keeping your job when the malware hits, [11]here . ®
Get our [12]Tech Resources
[1] https://www.theregister.com/2021/10/11/ransomware_as_a_service/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Yg7TmzyDYSUXl5t9WMh5OQAAANI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.theregister.com/2022/01/14/russia_revil_ransomware_gang_charged/
[4] https://www.theregister.com/2021/12/08/google_blockchain_botnet_lawsuit/
[5] https://www.theregister.com/2021/12/02/european_cybercrime_centre_carding_action_2021/
[6] https://www.theregister.com/2021/11/17/ncsc_annual_review/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yg7TmzyDYSUXl5t9WMh5OQAAANI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yg7TmzyDYSUXl5t9WMh5OQAAANI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2021/10/11/ransomware_as_a_service/
[10] https://www.theregister.com/2021/09/03/how_to_be_a_ransomware/
[11] https://www.theregister.com/2021/09/06/what_do_do_when_hit_by_ransomware/
[12] https://whitepapers.theregister.com/
Going after digital crimes?
ShadowSystems
If you're going to go after Ransomeware-As-A-Service style crimes, can you please start with Microsoft & arrest them for what they've done with Win10/11? Thanks.
That Interpol?
This would be the Interpol that's run by a murderer, right?