Why FCPA Prosecution Risk Has Become Personal

There was a time when the U.S. Department of Justice primarily focused its attention on prosecuting companies responsible for bribing foreign officials. Critics of this practice argued that the resulting fines had become just another cost of doing business. So, about eight years ago, the DoJ announced a new strategy of targeting corporate officers and directors for criminal prosecution under the Foreign Corrupt Practices Act (FCPA) in order to more significantly deter global corporations from engaging in corrupt practices.

If the number of convictions is any indication, the strategy may be paying off: since 2005, dozens of corporate executives have been convicted of violating the FCPA, paid hefty fines from their personal assets, and spent years in prison. (Of course, companies are still the subject of federal agencies’ wrath: the most recent case will result in Pfizer paying more than $60 million to settle FCPA charges, according to the Wall Street Journal.)

Last month, law firm Chadbourne & Parke released a study of the 61 FCPA prosecutions involving individual defendants over the past six years. A surprising number, 35%, of the defendants were the president, chief executive officer, or chief operating officer of their firm. In all, 53 of the individuals charged with violating the FCPA during this period were senior officers — a staggering 87% of all defendants.

These findings should be of concern to corporate executives worldwide. Though the U.K. Bribery Act — which went into effect earlier this year — has captured headlines as a force to be reckoned with, in many ways, the 33-year-old FCPA still reigns supreme in its threat to CEOs and CFOs who do business in the United States.

To understand the potential magnitude, one need look no further than the recent News of the World phone-hacking scandal that has consumed Rupert Murdoch and his News Corp. for much of the year. The gravest threat of criminal prosecution facing the Murdochs and other senior executives of News Corp. might come not from British authorities, who would directly oversee the publication, but from the FCPA.

via Why FCPA Prosecution Risk Has Become Personal.

Why FCPA Prosecution Risk Has Become Personal | CFO.com

There was a time when the U.S. Department of Justice primarily focused its attention on prosecuting companies responsible for bribing foreign officials. Critics of this practice argued that the resulting fines had become just another cost of doing business. So, about eight years ago, the DoJ announced a new strategy of targeting corporate officers and directors for criminal prosecution under the Foreign Corrupt Practices Act (FCPA) in order to more significantly deter global corporations from engaging in corrupt practices.

If the number of convictions is any indication, the strategy may be paying off: since 2005, dozens of corporate executives have been convicted of violating the FCPA, paid hefty fines from their personal assets, and spent years in prison. (Of course, companies are still the subject of federal agencies’ wrath: the most recent case will result in Pfizer paying more than $60 million to settle FCPA charges, according to the Wall Street Journal.)

Last month, law firm Chadbourne & Parke released a study of the 61 FCPA prosecutions involving individual defendants over the past six years. A surprising number, 35%, of the defendants were the president, chief executive officer, or chief operating officer of their firm. In all, 53 of the individuals charged with violating the FCPA during this period were senior officers — a staggering 87% of all defendants.

These findings should be of concern to corporate executives worldwide. Though the U.K. Bribery Act — which went into effect earlier this year — has captured headlines as a force to be reckoned with, in many ways, the 33-year-old FCPA still reigns supreme in its threat to CEOs and CFOs who do business in the United States.

To understand the potential magnitude, one need look no further than the recent News of the World phone-hacking scandal that has consumed Rupert Murdoch and his News Corp. for much of the year. The gravest threat of criminal prosecution facing the Murdochs and other senior executives of News Corp. might come not from British authorities, who would directly oversee the publication, but from the FCPA.

via Why FCPA Prosecution Risk Has Become Personal.

U.S. Requests for Google User Data Spike 29 Percent in Six Months | Threat Level | Wired.com

The number of U.S. government requests for data on Google users for use in criminal investigations rose 29 percent in the last six months, according to data released by the search giant Monday.

U.S. government agencies sent Google 5,950 criminal investigation requests for data on Google users and services from Jan. 1 to June 30, 2011, an average of 31 a day. That’s compared to 4,601 requests from July 1 to Dec. 31, 2010, the company reported Tuesday in an update to its unique transparency tool.

Google says it complied in whole or part with 93% of such requests, which can include court orders, grand jury subpoenas and other legal instruments.

For the first time, Google’s transparency report includes the number of users and accounts affected by such requests — in this case, 11,057.

The search and software giant also received 92 requests to remove data from its services, including YouTube. The requests collectively asked for 757 individual pieces of content be removed. Google says it complied fully or partially with 63 percent of the requests. The company noted it received a request from law enforcement to take down a video showing police brutality and another for videos allegedly defaming law enforcement officials. Google did not comply with either.

via U.S. Requests for Google User Data Spike 29 Percent in Six Months | Threat Level | Wired.com.

Massive Global Cyberattack Targeting U.S., U.N. Discovered; Experts Blame China – FoxNews.com

The world’s most extensive case of cyber-espionage, including attacks on U.S. government and U.N. computers, is set to be revealed Wednesday by online security firm McAfee, and analysts are speculating that China is behind the attacks.

The spying was dubbed “Operation Shady RAT,” or “remote access tool” by McAfee — and it led to a massive loss of information that poses a huge economic threat, wrote vice president of threat research Dmitri Alperovitch

“What is happening to all this data — by now reaching petabytes as a whole — is still largely an open question,” Alperovitch wrote on a blog detailing the threat. “However, if even a fraction of it is used to build better competing products or beat a competitor at a key negotiation (due to having stolen the other team’s playbook), the loss represents a massive economic threat.”

RELATED STORIES

Scotland Yard Arrests Accused LulzSec Spokesman ‘Topiary’

LulzSec, ‘Anonymous’ May Win Grand Prize at Hacker Convention

Notorious LulzSec Hacker ‘Tflow’ Released on Bail

Analysts told The Washington Post that the finger of blame for the infiltration of the 72 networks — 49 of them in the U.S. — points firmly in the direction of China.

via Massive Global Cyberattack Targeting U.S., U.N. Discovered; Experts Blame China – FoxNews.com.

Growing List of Security Threats to Mac OS X Lion | News & Opinion | PCMag.com

Long gone are the days when Apple lovers could take pride in their virus-free Macs while snickering at PC owners’ constant worries about security. Apple’s brand new Mac OS X Lion operating system is already acquiring an unhealthy list of reported vulnerabilities less than a week after its official release.

Some Lion vulnerabilities are carry-overs from Snow Leopard, like the “Mac Defender” class of scareware that first surfaced in May. Apple’s recent software update to prep Macs running Snow Leopard for Lion installation includes identification and removal of known variants of the malware.

Like Mac Defender, another newly identified OS X threat called the Olyx backdoor appears to be a variant of Microsoft Windows-targeting malware that’s simply been tweaked to go after Macs.

Researchers say the remote-controlled Trojan application resembles 2009′s GhostNet malware, a threat to Windows-based PCs. And as with the various strains of Mac Defender, some of the most knowledgeable and quickest responses to this latest backdoor threat are coming from Apple’s longtime rival Microsoft.

Another threat to Lion (and earlier versions of OS X) that’s been identified by password recovery software vendor Passware is a vulnerability that enables passwords to be recovered from Macs via Firewire’s use of Direct Memory Access (DMA). Yet another is a laptop battery chip vulnerability—that doesn’t appear to have been addressed in any OS X 10.7 updates as of yet—which security researcher Charles Miller of Accuvant Labs says can be exploited to “brick” batteries in several Apple laptops.

via Growing List of Security Threats to Mac OS X Lion | News & Opinion | PCMag.com.

‘Indestructible’ botnet has infected 4.5M PCs and counting | VentureBeat

The “TDL-4″ botnet now has more than 4.5 million infected PCs running on it and is the “most sophisticated threat” to computer security today, according to Kaspersky Labs researcher Sergey Golovanov.

Botnets are groups of malware-infected computers that are used for malicious activities, such as sending spam, stealing personal information, launching hacker attacks, and infecting other computers with viruses. They are so hard to defeat because there are so many infected machines.

Kaspersky’s anti-virus software identifies the botnet as TDSS. “TDSS uses a range of methods to evade signature, heuristic, and proactive detection, and uses encryption to facilitate communication between its bots and the botnet command and control center,” Golovanov wrote earlier this week. “TDSS also has a powerful rootkit component, which allows it to conceal the presence of any other types of malware in the system.”

The TDL-4 botnet started hitting computers in 2008, and it goes undetected because it infects the master boot record of a computer. This means the operating system and security software can’t detect it because the infection is so deep. It’s also strong because it has its own “anti-virus” that prevents other botnets from taking it over.

via ‘Indestructible’ botnet has infected 4.5M PCs and counting | VentureBeat.

Is the Google Probe ‘Microsoft Redux?’ – Law Blog – WSJ

As we noted yesterday, Google faces the most serious legal threat of its young existence:  an antitrust probe into whether it has used its dominance in search-advertising to illegally freeze out competition.

Specifically, the Federal Trade Commission is expected to look into whether Google searches unfairly steer consumers to Google’s own products, and away from those of its competitors,  WSJ reports.

Google, of course, could walk away without a scratch. But still, the antitrust probe is so broad in scope, with the potential to reshape the tech landscape, that it naturally calls to mind the Microsoft case, when the government in the 1990s accused the computer company of using its dominant Windows operating system to hobble competitors.

Are the comparisons apt?

Gary Reback, a Silicon Valley antitrust lawyer who attacked Microsoft before and has pushed for action against Google, sure thinks so. “It is Microsoft redux,” he told WSJ in this piece comparing the two high-profile antitrust matters. “It is almost exactly the same case,” he said.

via Is the Google Probe ‘Microsoft Redux?’ – Law Blog – WSJ.

Scammers turning to phone calls to gain PC access | Security – CNET News

Forget e-mail. Criminals are making old-fashioned phone calls and offering free security scans in order to gain access to people’s computers, according to Microsoft.

To run the con, criminals pretend to be PC security experts from legitimate companies. They call their intended victims, warning of a risky security threat and offering to run a free security checkup. If the victims take the bait, the scammers gain access to their PCs and often capture passwords or financial information.

Among the 7,000 PC users that Microsoft polled in the U.S., U.K., Canada, and Ireland, 15 percent on average had received such a phone call.

Of those, 22 percent fell for the con.

In many cases, the criminals were granted remote access to the victim’s PC, where they were able to steal certain private information. In other cases, the victims provided credit card details, believing they were paying for legitimate software.

via Scammers turning to phone calls to gain PC access | Security – CNET News.

China denies Gmail-hacking accusations | World news | The Guardian

China has rejected Google’s accusations that it is behind a wave of high-level hacking attacks and said its critics had “ulterior motives” in trying to blame the government in Beijing.

The rebuttal follows revelations that Chinese hackers have stolen the Gmail login details of hundreds of senior US and South Korean government officials as well as Chinese political activists.

Google has warned the victims of the “phishing” scam and made a public statement about the threat. The US company said it could not say for sure who was responsible, but it traced many of the attacks back to Jinan, the capital of Shandong province and a suspected centre of cyber espionage.

A spokesman for the Chinese foreign ministry said it was unacceptable to blame Beijing.

“Hacking attacks are an international issue. China is also a victim,” Hong Lei told a regular press conference. “The so-called statement that the Chinese government supports hacking attacks is a total fabrication out of nothing. It has ulterior motives.”

via China denies Gmail-hacking accusations | World news | The Guardian.

Define, educate, prevent: Avoiding data loss is easier than you may think – Computerworld

Most organizations believe they aren’t in danger of losing data, but as recent news demonstrates, the threat is real and no organization is immune.

In a recent CDW report on threat prevention, data loss emerged as the No. 1 cybersecurity challenge faced by medium and large businesses. Fully 37% of IT security decision makers surveyed for the report cited data loss as “the next big security threat” their organizations face, naming it a bigger threat than viruses, worms, malicious attacks and botnets.

SECURITY THREAT: Too many data loss prevention tools become shelfware, says analyst

Just envisioning the potential consequences of data loss is enough to keep executives up at night. Data loss of any kind can damage an organization in countless ways. From a simple hard-cost standpoint (forensics, notification, credit protection, etc.), data loss is expensive, costing an estimated average of $200 per record breached, or an average of $6.8 million per total breach, according to a recent Ponemon Institute survey.

The true cost, however, is much harder to measure when considering factors such as lost competitive advantage, loss of revenue, litigation and company reputation.

The first step to prevent data loss is to accept that data loss is a real problem. Truly solving the problem can be boiled down to three simple concepts: define/baseline, educate and enforce.

via Define, educate, prevent: Avoiding data loss is easier than you may think – Computerworld.