Arrested Russian Spies Used Steganography To Hide Data – Privacy and Identity Theft

11 alleged Russian spies have been arrested and charged with conspiracy to commit an offense against the United States by not registering with the attorney general. 9 of these individuals have also been charged with money laundering. Details on the people arrested are here. One couple is based in Cambridge, MA.

The FBI says that these spies not only used encryption to protect data on their laptops and USB flash drives, but that they also are suspected of using proprietary Russian-build steganography software to hide data inside images and other files on their computers.

Steganography is the technique of hiding information inside other documents or data, so that it cannot be detected. Combining steganography with cryptography can create systems of communications and data protection that are incredibly difficult to detect and to crack.

via Arrested Russian Spies Used Steganography To Hide Data – Privacy and Identity Theft.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Arrested Russian Spies Used Steganography To Hide Data – Privacy and Identity Theft

11 alleged Russian spies have been arrested and charged with conspiracy to commit an offense against the United States by not registering with the attorney general. 9 of these individuals have also been charged with money laundering. Details on the people arrested are here. One couple is based in Cambridge, MA.

The FBI says that these spies not only used encryption to protect data on their laptops and USB flash drives, but that they also are suspected of using proprietary Russian-build steganography software to hide data inside images and other files on their computers.

Steganography is the technique of hiding information inside other documents or data, so that it cannot be detected. Combining steganography with cryptography can create systems of communications and data protection that are incredibly difficult to detect and to crack.

via Arrested Russian Spies Used Steganography To Hide Data – Privacy and Identity Theft.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

FBI Struggles to Pull Criminal Data from Digital Devices – PCWorld

A mini SIM card next to its electrical contact...
Image via Wikipedia

Non-traditional communications devices such as smartphones and game consoles pose a particular problem to law enforcement agencies trying to milk them for forensic data that reveals criminal activity, attendees were told at the 2010 Computer Forensics Show in New York City.

“Forensic tools for cell phones are in their infancy,” says Stephen Riley, a forensic examiner with the FBI’s Computer Analysis and Response Team. “There’s lots of different carriers, different phones, different cables – just try to keep up.”Smartphones can communicate via SMS, MMS, mobile e-mail, mobile internet access, VoIP and traditional cellular voice networks, Riley says, making each machine a potential treasure trove of information but also a nightmare maze of possible proprietary technologies to unlock it.

Retrieving SMS messages can depend on the model of phone, the carrier, the time of day, even the country in which the phone is used. SIM cards removed from phones carry potentially useful forensic information, but unless it is associated with a particular phone’s PIN, it’s inaccessible. Perhaps the personal unlock feature controlled by phone manufacturers could release the data, but that requires knowing the make and model of the phone, he says.

The ready availability of cell phones is also a problem. Searches of suspects' residences can turn up drawers-full of cell phones that are no longer used but never thrown out. Yet they can demand valuable forensic time.

Game consoles pose a separate problem. They can be used to send e-mail and connect to the Internet but have very little internal memory so whatever is on the drive can be quickly over written and therefore gone forever, he says. “You can take a Wii onto the Internet and it doesn’t save sites or browser history,” he says. “If you type in a Web address and surf, 10 minutes later there’s no record of it.”

via FBI Struggles to Pull Criminal Data from Digital Devices – PCWorld.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

U.S. sends a message by stepping up crackdown on foreign business bribes – washingtonpost.com

Federal authorities want companies to know that the cost of paying bribes to win overseas contracts is growing steeper by the day.

Long a priority of the FBI and the Justice Department, efforts to police corrupt business payments have intensified in recent weeks, with multimillion-dollar corporate settlements and coordinated arrests of individual executives accused of attempting to grease the skids.

On Friday, BAE Systems, the world’s second-largest defense contractor, agreed to pay $400 million to resolve decade-old allegations that it misled the Defense and State departments about its efforts to comply with the Foreign Corrupt Practices Act. The law bars companies from bribing government officials to win lucrative contracts and other favorable treatment.

The BAE deal came weeks after the FBI unveiled its first FCPA sting operation, which culminated in the arrests of nearly two dozen businessmen employed in the defense and law enforcement equipment industry. Most of the people arrested were in Las Vegas to attend a trade show. FBI agents and prosecutors in the Justice Department’s Fraud Section arranged the takedown to occur at a shooting range after the suspects had checked their personal firearms on the way in the door.

via U.S. sends a message by stepping up crackdown on foreign business bribes – washingtonpost.com.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

FBI wants records kept of Web sites visited | Politics and Law – CNET News

The FBI is pressing Internet service providers to record which Web sites customers visit and retain those logs for two years, a requirement that law enforcement believes could help it in investigations of child pornography and other serious crimes.

FBI Director Robert Mueller supports storing Internet users' “origin and destination information,” a bureau attorney said at a federal task force meeting on Thursday.

As far back as a 2006 speech, Mueller had called for data retention on the part of Internet providers, and emphasized the point two years later when explicitly asking Congress to enact a law making it mandatory. But it had not been clear before that the FBI was asking companies to begin to keep logs of what Web sites are visited, which few if any currently do.

The FBI is not alone in renewing its push for data retention. As CNET reported earlier this week, a survey of state computer crime investigators found them to be nearly unanimous in supporting the idea. Matt Dunn, an Immigration and Customs Enforcement agent in the Department of Homeland Security, also expressed support for the idea during the task force meeting.

via FBI wants records kept of Web sites visited | Politics and Law – CNET News.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Legal Blog Watch

The FBI is warning U.S. law firms to beware of hackers. The FBI said this week that hackers are using phishing e-mails with malicious payloads to target law firms and public relations firms. “During the course of ongoing investigations, the FBI identified noticeable increases in computer exploitation attempts against these entities,” the warning said.

“Phishing” refers to the use of e-mail or instant messaging to trick the recipient into providing personal or sensitive information, such as user names, passwords and credit card information. Generally, the message draws the recipient to a Web site designed to replicate a legitimate site, where the recipient is asked to provide this information. In this case, the scam involves an e-mail that installs a malicious program to search for sensitive data.

The FBI warning said that the scam targeting law firms arrives as an e-mail that includes an attachment or a link. The e-mail appears to arrive from a trusted source based on its subject line and attachment name. Opening the message itself is not harmful. But if the recipient opens the attachment or clicks on the link, it launches a self-executing file that then attempts to download another file. Once that malicious file is installed, it searches for sensitive files and sends them to a computer server outside the firm — and usually outside the United States.

via Legal Blog Watch.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare