Some Hackers Earn $2m A Year

The escalation in cyber-crime has significantly increased. Compared to other criminal activities cyber-crime has relatively low risks and criminals have realised that they can make more money, with less risk of getting caught, and receive smaller penalties if they do get caught, by manipulating cyber technology for their own advantage.

Recent research finds that a number of cyber criminals are earning around $2m annually and others between $40k to $1m and so criminal activity has increased significantly. Now, organised criminal gangs are using the electronic connected world to cyber-attack and hack globally.
 
Nevertheless, hackers spend as much time designing their attacks as they do finding ways to stay below the radar. A single slip-up can result in the end of their malicious enterprise.

But there is some recent good news that European police have recently arrested more than 800 people after shutting down an encrypted phone system, EncroChat, used by organised crime groups to plot murders and drug deals. More than two tonnes of drugs and £54m in cash, sub-machine guns, an  assault rifle, high value cars and luxury watches were impounded, says the British National Crime Agency (NCA). 

The top-secret phone system had been used by criminals to trade drugs and guns has been successfully penetrated and shut down.

The NCA worked with forces across Europe on the UK's "biggest and most significant" law enforcement operation. However, many other cyber criminals are using malware, DDoS and phishing attacks on companies and individuals that have poorly protected data.

The Dark Web provides the perfect platform for hackers to trade their stolen data. It can only be accessed using specialist software, and any websites hosted on the Dark Web are encrypted and can’t be found using traditional search engines or browsers.

In the UK, cyber-crime and fraud are now the most common offences, with around ten percent of the population getting hacked successfully. More than five and a half million cyber offences are thought to take place each year which accounts for almost 50% of all UK crime. Despite the scale of the problem, more than 80% of all these crimes are not reported to the police. Therefore, cyber criminals are rarely caught and prosecuted because they are virtually invisible. Crime has transformed with the digital age and police forces around the world are now having to rapidly adapt in order to tackle the problem.

The global nature of the problem has called for a global response, and many international law enforcement agencies are now working closely together to take down some of the world’s biggest cyber criminals.

Due to the sophisticated tactics that hackers use to cover their tracks, it’s extremely difficult to catch them and bring them to justice. Only around 4/5% of cyber criminals are apprehended for their crimes which demonstrates just how challenging it is for law enforcement agencies to arrest and prosecute these offenders.

Hackers will often use secure software such as a proxy server to hide their identity and funnel their communications through lots of different countries in order to evade detection.

Other technologies like Tor and encryption enable them to add multiple layers to mask their identity. The combination of these tools allows them to commit their crimes undetected and in countries where they know they can’t be prosecuted.

Tracking hackers down is laborious and often takes a lot of time, collaboration and investigative research. Specialist cybercrime units need to be assembled in order to retrieve and analyse any potential evidence. Encrypted files will need decrypted, deleted files recovered and passwords cracked.

Catching Hackers

Despite what may seem like an insurmountable task, hackers are human and make mistakes. It’s often these careless errors that will trip the criminals up and leave a trail of evidence that the police can follow. The majority of cyber-crimes are financially motivated, however for a large number of hackers it’s the thrill of the hack and the excitement of bringing down a company’s computer system that motivates them.

Following an attack, many will turn to hacker’s forums to brag about their exploits and this often provides police with the vital clues they need to start identifying the person responsible. Some cyber police operations have found effective way to lure cyber criminals in and find out more about how they operate and who they are. Essentially, they’re a decoy computer system set up to mimic a likely target for an attack.

The systems will contain data and applications that will trick hackers into thinking they are attacking a legitimate target.  The information gathered from these dummy attacks can provide valuable information on who is responsible and if there are any similarities that links the individual to other attacks.

A hacker can gain access to your organisation easily when your staff are not following your internal policies and procedures and it is very important that your management and employees receive cyber training that they engage with and use.

PaCCS Research:      Metacomplinace:       Metacompliance:     Web Professionals:        TechTarget:     

Cyber Security Intelligence recommends GoCyber cyber training for all employees and management:

Click HERE to register for a  free GoCyber demo

You Might Also Read: 

Young Hacker Makes $1m. Legally:

 

« Iran Threatens Retaliation For Cyber Attack At Nuclear Site
The Key Cyber Security Challenges »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

FT Cyber Resilience Summit: Europe

FT Cyber Resilience Summit: Europe

27 November 2024 | In-Person & Digital | 22 Bishopsgate, London. Business leaders, Innovators & Experts address evolving cybersecurity risks.

rPeople Staffing

rPeople Staffing

rPeople provides direct placement in all areas of your organization, including and specializing in Technical and Executive hiring.

Cloud Foundry Foundation (CFF)

Cloud Foundry Foundation (CFF)

Cloud Foundry supports the full application development lifecycle, from inception, through all testing stages, to deployment.

INCIBE-CERT

INCIBE-CERT

INCIBE-CERT is the reference security incident response center for citizens and private law entities in Spain

aeCERT

aeCERT

aeCERT is the national Computer Emergency Response Team for the United Arab Emirates.

High Sec Labs (HSL)

High Sec Labs (HSL)

High Sec Labs develops high-quality, cyber-defense solutions in the field of network and peripheral isolation.

HelseCERT

HelseCERT

HelseCERT is the health and care sector's national information security center for Norway.

Cyber Discovery

Cyber Discovery

Cyber Discovery, the UK Government's Cyber Schools Programme, is a learning programme designed to give young people the opportunity to learn the skills needed to enter the cyber security profession.

Document Security Systems (DSS)

Document Security Systems (DSS)

DSS anti-counterfeit, authentication, and brand protection solutions are deployed to prevent attacks which threaten products, digital presence, financial instruments, and identification.

swIDCH

swIDCH

swIDch is a technology company that aims to eliminate CNP (card not present) Fraud.

Cohesity

Cohesity

Cohesity radically simplifies the way businesses back up, manage, protect, and extract value from their data—in the data center, at the edge, and in the cloud.

Etonwood

Etonwood

Etonwood specialises in infrastructure and vendor technology recruitment in areas including cloud platforms, cyber security and service management.

DataFleets

DataFleets

DataFleets is a privacy-preserving data engine that unifies distributed data for rapid access, agile analytics, and automated compliance.

Securd

Securd

Securd takes opportunities away from your cyber adversaries. Cloud-delivered zero-trust DNS firewall and web filtering protection keep your business network and remote employees safe.

Incyber

Incyber

Incyber is a fully integrated network and cybersecurity solutions provider contracted to safeguard public and private enterprise, high value data and sensitive industries.

Bleach Cyber

Bleach Cyber

Bleach Cyber helps small businesses with an affordable and user-friendly solution for managing cloud security.