Cyber Crime Management

•Download as PPT, PDF•

6 likes•1,895 views

This document discusses cyber crime management and summarizes key topics covered which include major fraud types, communication media used, database management issues, telecommunication challenges, and legal and regulatory perspectives on cyber crimes. Specific cases of cyber crimes are also presented in a table listing details of number of victims, arrests, fraud amounts, and brief descriptions.

Technology

Cyber Crime Management
by Dr. Triveni Singh
ASP, UP STF

Agenda
Major Frauds
Communication Media
Telecommunication Issue
Database Management
Legal and Regulatory Perspective

Major Frauds
Cheap Loans
BTS Tower
Jobs
Holidays
Fake E-Commerce Site
Insurance Frauds

5
PTI Coverage
ICICI Prudential - Mail Spoofing Case

Cases
S.
No
No. of
Victims
Total No.
of Arrests
Fraud
Amount
Date Description of Work
1 1500 87 1.25 Cr 12/08/2015
ICICI Prudential Case – Spurious
Calls / Fake Calls Fraud (Mail
Spoofing)
2 17 5 1 Cr
17/01/2015
BRL Shine.com Fraud
3 76 2 60 Lac 25/03/2015 IG Naukri.Com Fraud
4 1 3 - 29/03/2015 PCS Exam Fraud
5 2500 3 4 Cr 16/04/2015 Online Billing System Fraud

Contd…
S.
No
No. of
Victim
s
Total No.
of
Arrests
Fraud
Amount
Date Description of Work
6 4560 21 23 Cr 09/05/2015 Telecom Tower Fraud
7 37 12 2.22 Cr 25/05/2015 CPMT Exam Fraud
8 5000 59 16 Cr 15/06/2015 Online Job Frauds (OTP)
9 200 1 85 Lakhs 16/01/2015 UP Sarvagramin Bank Fraud
(Phishing Site)

S.
No
No. of
Victims
Total No.
of Arrests
Fraud
Amount
Date Description of Work
10 300 5 50 Lakh
14th
March
2016
Cheque Cloning Case
11 5000 2 25 crore
5th
March
2016
Fake Insurance Racket
12 1 2 53 lakhs 20th
December Fake Job Racket
13 500+ 40 12 Crore
5th
January,
2016
Fake Insurance Racket
14 350+ 20 Crore
10th
December
2015
Fake Call Centre Racket

S.
No
No. of
Victims
Total No.
of Arrests
Fraud
Amount
Date Description of Work
10 125 3 53 Lakhs 10th
March 2016 Job Racket
11 5000 121 25 crore 5th
March 2016 Fake Insurance Racket
12 1 2 50 lakhs 15th
March 2016 Cheque Cloning Racket
13 20 2 18 Lakhs 6th
April, 2016 Bank of Baroda Fraud
14 350+ 8 20 Crore 13th
May 2016 Railway Job Racket

Web Site
PRI
VoIP Call
Communication Media
Mobile Phones
Land Line
VoIP
PRI Lines
Website

Paid Access
Employee
Hacking
1. Insurance Company
2. Job Portals
3. Bank
4. Tour Operators
5. Online Crawler.
Data Vendors
Darkode
Database
Database Management

•IMEI
•MAC Address
•IP address
Spoofing
Website
Payment
Gateway
(Scan Document)
Whois
No KYC
Domain
Registration
Technical Challenges
Call
SMS
Mail
Whatsapp & VoIP
Logs &
Server

Telecommunication Issues
Source Port
Destination Port
NAT Several
SDR
IP Address
VoIP Logs
Mac Filtering
Logs
IP version 4 vs IP version 6
Mac Address
Port
Different Format of Different Operators

Regulatory Issues
PPI License by RBI (Minimum KYC)
Basic (Bank account) KYC
SIM (Telecom) KYC
No Physical Verification
No Central Database
Payment Gateway KYC
Banking Database of Different
Vendors

A. IT Act 43 (A)
B. IT Act 69 (1) (Interception monitoring and Decryption
C. IT Act 67 (C)
D. IT Act 72 (A) Disclosure
E. IT Act 85
F. Company Act, 2013, Sec 477
1. Cyber Cafe Rules Implementation
2. Jurisdictional Conflict
3. MLAT/LR
Why to be serious??
A. ISO 27001
B. PCI-DSS
FIR

This document is an application for an ePerolehan access medium. It contains the applicant's personal details such as name, IC number, address, and contact information. It specifies that the applicant is requesting an ePXS access medium with 3 years validity to be delivered via courier. It provides instructions that the applicant must submit a photocopy of their IC along with payment to obtain the ePXS USB token. It also provides instructions for obtaining a digital certificate via smart card reader once MOF license approval and payment is received for a MyKad eP application. The applicant declares the information provided is true and agrees to the Terms and Conditions of ePerolehan service.

How to check pnr status

K Anusha

Trend today (21 feb 2018)

Money Classic Research

The benchmark indices declined in the last hour of trading due to a sharp fall in the rupee against the US dollar. The Sensex closed down 71 points and the Nifty fell 18 points. Several midcap stocks such as Tata Global, Biocon, and Voltas declined 1-3%, while some banks such as Canara Bank and IDBI Bank gained 1-5%. IndiGrid completed the acquisition of three transmission assets from Sterlite Power worth Rs. 1,410 crore and acquired a 46% stake in Patran Transmission Company for Rs. 230 crore. The I-T department attached 11 bank accounts of Rotomac group in connection with an alleged tax evasion case of around Rs. 85

Anonymous email 26 aug14

Naval OPSEC

This document provides information on two anonymous email services: Hushmail and Cloak My. Hushmail is a traditional webmail service that requires payment but retains little user data. Cloak My allows one-time messaging and chat without an account but requires sharing a unique URL. Both services should be accessed using Tor browser to anonymize the user's IP address. The document provides instructions on setting up accounts with each service and tips for using them anonymously.

Membership form

adeelasgher

This document contains an application form for associate membership to the Call Centers Association of Pakistan (CCAP). The form requests information such as the applicant's name, company name, position, address, contact details, industry type, and signature. It also includes statements regarding the collection and use of personal information provided in the application. Upon acceptance, members can choose to have their information listed on CCAP's online directory and website. The form is to be submitted along with a one-time entrance fee and photos of the applicant.

Web based pims user identification form

azad12915

This document contains a user identification form for a web-based police information management system (PIMS). It provides details for a new user account, including the user's full name, designation, police ID number to be used as the login, email address, national ID, unit, contact phone number, and requested user type. A recommending authority has signed to request the creation or revocation of the user account.

ATM skimming fraud case in 2018

mohsin iqbal

Six Chinese men were indicted in an ATM skimming fraud case in Pakistan in 2018. They stole over Rs. 10 million from 559 accounts at Habib Bank Limited by using skimming devices to copy card information. This information was then used to withdraw money from ATMs in China, Indonesia, and other countries while the customers were in Pakistan. The Chinese men were arrested and charged under the Prevention of Electronic Crime Act for offenses including cyber terrorism, unauthorized access to critical infrastructure, and electronic forgery.

Istory of cbcid

roshanipadwal

The document lists contact information for cyber crime police stations in major cities and states across India, including Chennai, Bangalore, Hyderabad, Mumbai, Lucknow, and Trivandrum. It provides the name of the officer in charge, address, telephone number, and email for reporting cyber crimes. It also lists addresses for the CBI Cyber Crime Cell in New Delhi and representative offices in India for Yahoo Mail and Hotmail as potential service providers in cyber crime cases.

The document discusses various examples of companies that effectively and ineffectively managed crises. It outlines lessons that can be learned from how companies like Nokia, BP, Tylenol, Ford, London Underground, and Monsanto prepared for and responded to catastrophic incidents. Effective crisis management requires advance preparation, building a strong risk management culture, acting decisively in response, avoiding blame games, clearly defining responsibilities, and ensuring proper communication.

Security Incident Response Readiness Survey

Rahul Neel Mani

The document discusses security incident response readiness over time as technologies and threats have evolved. It analyzes survey results from 106 organizations across industries on their security incident preparation. Key findings include: over 70% have a cybersecurity strategy but lack business alignment; budget increases are expected but skills need improving; phishing is a top attack method; and collaboration on incidents needs strengthening through information sharing. The document advocates a strategic, framework-based approach to security incident response focusing on protection, detection, response, and recovery capabilities.

ABC of Infosec

Rahul Neel Mani

A CISO discusses the importance of governance structures and board support for information security. They emphasize focusing on the basics like patch and vulnerability management, user access control, secure authentication, and encryption. The CISO stresses the need to measure, track and report security metrics and provide user training and awareness, as people will choose fun over security. They also note that insurance can help mitigate remaining risks.

Detect Unknown Threats, Reduce Dwell Time, Accelerate Response

Rahul Neel Mani

The document discusses how organizations face challenges from growing security threats and limited security resources. It describes how RSA offers an integrated security analytics platform that combines network and endpoint visibility and analytics to help organizations detect unknown threats, reduce the time threats spend undetected, and accelerate security response. The platform provides comprehensive network and endpoint forensics to help fully investigate security incidents and eradicate attackers.

Cybersecurity: Mock Cyberwar Game

Rahul Neel Mani

This document discusses a mock cybersecurity scenario involving a cyber attack on a fictional e-commerce company called AmazingKart.com. Over the course of several pages, it outlines the unfolding situation over 24 hours as hackers breach AmazingKart's systems and steal customer data, the incident is discovered by IT and reported in the media, and the company executives must deal with the fallout, informing customers, partners, banks, holding a press conference and meeting with the board of directors. Key lessons highlighted include the importance of preparation for cyber incidents and treating cybersecurity as a business-wide issue, not just an IT problem.

Get the Basics Right

Rahul Neel Mani

The document emphasizes the importance of getting the basics right in cybersecurity. It provides three reasons why basics are important: 1) because basics never change, 2) because basics support more complex systems, and 3) because basics have stood the test of time. However, the document notes that in several data breach examples, the basics were missed. This led to personal information being exposed. The document stresses that strong cybersecurity requires keeping the basics, like access management and patching, as a strong foundation to build upon while also adapting to new priorities and complexities.

State of the Internet: Mirai, IOT and History of Botnets

Rahul Neel Mani

This document discusses the history and evolution of botnets, focusing on the Mirai botnet. It describes how Mirai was able to assemble a large botnet by exploiting vulnerabilities in internet of things devices with default passwords. Mirai launched large distributed denial of service attacks in late 2016 by harnessing the power of its botnet. The document advises steps companies can take to strengthen security and mitigate risks from botnet attacks.

Is Cyber Security the Elephant in the Boardroom?

Rahul Neel Mani

This document discusses how to simplify and communicate cybersecurity to CEOs and boards of directors. It notes that over 70% of organizations do not have cybersecurity strategies aligned with business goals and 58% lack confidence in their cybersecurity programs. It recommends taking a portfolio approach that focuses on articulating a cybersecurity vision, journey, landscape, and roadmap using simple and clear language rather than complex technical jargon. The crown jewels approach identifies the most critical assets to protect. Effective communication involves challenging complexity and risk with a contextual and challenging vision.

Upgrading Your Firewall? Its Time for an Inline Security Fabric

Rahul Neel Mani

An inline security fabric can provide benefits over traditional firewall deployments by reducing network downtime, increasing security tool efficiency, and improving inspection and security monitoring. An inline security fabric uses high-availability network packet brokers and bypass switches to intelligently route traffic across security tools, load balance traffic to extend tool life, and ensure redundancy so there are no single points of failure. This eliminates disruptions from tool failures or upgrades while improving security resilience.

How to Become a Thought Leader in Your Niche

Leslie Samuel

SMAC in Healthcare: Arvind Sivaramakrishnan, CIO Apollo Hospitals

Rahul Neel Mani

SMAC in Healthcare: Will it Contribute to Patient Experience? discusses how emerging technologies are changing the healthcare landscape and empowering patients. The document notes that patients now have access to more information, see healthcare as a service, and are more decisive consumers. It also outlines challenges healthcare providers face in clinical areas like data mining and management, as well as non-clinical areas like ubiquitous access to patient information. The goal is to understand how technologies can help touch more lives by enhancing patient engagement and experience.

Preparing for the Future Innovation in Digital Healthcare: Manas Tripathi

Rahul Neel Mani

This document discusses various topics related to innovation in digital healthcare. It begins by describing different types of innovation, such as visible innovation for end users and invisible process innovation. It then provides examples of innovation, including how a hacker developed an innovative mosquito protection laser shield using common consumer electronics. The document also examines the transition to more patient-centric care from centralized medical facilities. It provides case studies on innovative portable e-backpacks in Brazil that expand access to remote communities and a UK program called Patient Access that improves patient experiences and reduces wait times through phone consultations.

Bitcoin and Ransomware Analysis

Inderjeet Singh

ciso-platform-annual-summit-2013-Fgont-ipv6-myths-dynamic

Priyanka Aash

Don’t Just Trust Cloud Providers - How To Audit Cloud Providers

Michael Davis

This document discusses how to audit cloud providers to verify security and compliance. It begins by explaining the challenges of auditing cloud providers and what SSAE16 reports are and are not. It then provides tips on what aspects of a cloud provider to audit, such as encryption, certifications, and vulnerability scanning. The document recommends performing technical audits and assessments that go beyond just legal contracts or questionnaires. It emphasizes the importance of transparency and following the data when auditing cloud providers.

Краткая организационная структура

Zverun

Github時代のgitのはなし

Yoichi Toyota

Take Control of Your Imaging and Printing: Siva Kumar

Rahul Neel Mani

CIO Productivity Conclave 2016

Rahul Neel Mani

A fresh research* initiative by dynamicCIO shall aim at creating perspectives around the important areas of Enterprise Digital Platforms and enable CIOs to become more competitively relevant. Topic of Research: “Platform Thinking– the New Engine of Competitive Strategy” The Scope of Research: § Establishing a definition and scope of Platforms § How Platforms are going to be the basis of future competitive strategy. § How does the enterprise digital platform create capabilities and how these capabilities serve as options, which can be leveraged in market contexts?

RSA Conference 2016 Review

Norman W. Mayes, CISSP, MCSE, ITIL

The document summarizes key information from the 2016 RSA Conference related to data privacy and breaches. It discusses types of private data compromised in breaches, categories of data breaches, and statistics on data breaches in 2015. Specific breaches from Washington in 2015 are outlined, including details on the Noble House Hotel, T-Mobile/Experian, and Premera Blue Cross breaches. The document concludes with recommendations for security best practices to avoid data breaches in 2016, such as encryption, password management, and having a data breach response plan.

Real-time fraud detection

confluent

IT ACT 2000

Kaustubh Barve

In order to keep Information Technology safe tool to use the Indian Government passed Information Technology Act and subsequently did necessary amendments in it. The Law efficiently deals with the offences done inside the country. Because of this act many culprits have been convicted. It has given a robust protection to Information Technology within the country but however it still falls short when compared with many other nations to defend its systems aggressively from cyber terrorists.

Viewers also liked

Sumit dhar

Rahul Neel Mani

Security Incident Response Readiness Survey

Rahul Neel Mani

ABC of Infosec

Rahul Neel Mani

Detect Unknown Threats, Reduce Dwell Time, Accelerate Response

Rahul Neel Mani

Cybersecurity: Mock Cyberwar Game

Rahul Neel Mani

Get the Basics Right

Rahul Neel Mani

State of the Internet: Mirai, IOT and History of Botnets

Rahul Neel Mani

Is Cyber Security the Elephant in the Boardroom?

Rahul Neel Mani

Upgrading Your Firewall? Its Time for an Inline Security Fabric

Rahul Neel Mani

How to Become a Thought Leader in Your Niche

Leslie Samuel

SMAC in Healthcare: Arvind Sivaramakrishnan, CIO Apollo Hospitals

Rahul Neel Mani

Preparing for the Future Innovation in Digital Healthcare: Manas Tripathi

Rahul Neel Mani

Bitcoin and Ransomware Analysis

Inderjeet Singh

ciso-platform-annual-summit-2013-Fgont-ipv6-myths-dynamic

Priyanka Aash

Don’t Just Trust Cloud Providers - How To Audit Cloud Providers

Michael Davis

Краткая организационная структура

Zverun

Github時代のgitのはなし

Yoichi Toyota

Take Control of Your Imaging and Printing: Siva Kumar

Rahul Neel Mani

CIO Productivity Conclave 2016

Rahul Neel Mani

Viewers also liked (19)

Sumit dhar

Security Incident Response Readiness Survey

ABC of Infosec

Detect Unknown Threats, Reduce Dwell Time, Accelerate Response

Cybersecurity: Mock Cyberwar Game

Get the Basics Right

State of the Internet: Mirai, IOT and History of Botnets

Is Cyber Security the Elephant in the Boardroom?

Upgrading Your Firewall? Its Time for an Inline Security Fabric

How to Become a Thought Leader in Your Niche

SMAC in Healthcare: Arvind Sivaramakrishnan, CIO Apollo Hospitals

Preparing for the Future Innovation in Digital Healthcare: Manas Tripathi

Bitcoin and Ransomware Analysis

ciso-platform-annual-summit-2013-Fgont-ipv6-myths-dynamic

Don’t Just Trust Cloud Providers - How To Audit Cloud Providers

Краткая организационная структура

Github時代のgitのはなし

Take Control of Your Imaging and Printing: Siva Kumar

CIO Productivity Conclave 2016

Similar to Cyber Crime Management

RSA Conference 2016 Review

Norman W. Mayes, CISSP, MCSE, ITIL

Real-time fraud detection

confluent

IT ACT 2000

Kaustubh Barve

Sheriff presentation to Saratoga City Council December 6th

Rishi Kumar

This document provides crime statistics and analysis for the city of Saratoga. It shows that residential burglaries decreased 25% from 2017 to 2018 while vehicle burglaries increased 114%. The data also examines burglary locations, times, and methods of entry. Response times for priority calls are provided, with the goal of a 6 minute response for priority 1 and 10 minutes for priority 2. Proactive law enforcement efforts discussed include targeted patrols, detective collaboration, covert enforcement actions, neighborhood watch meetings, bicycle patrol training, and automated license plate reader deployment.

Smart sms

Mohamed Ali Salem ,MBA,PMP,Scrum

The document discusses developing a smart SMS and smart wallet application for Riyad Bank. It outlines limitations of traditional SMS, how the smart SMS application would work with visual and sound notifications as well as account details. It proposes a prototype, development timeline and costs, and forecast for ROI. It also describes how a smart wallet could work directly from a mobile phone for secure payments without needing additional hardware.

Computer Security in Banking and bookkeeping

Yogi Pratama

This document summarizes security issues related to banking and bookkeeping. It defines banking as accepting and saving customer money, and bookkeeping as recording and tracking financial transactions. It discusses security requirements like access control, vulnerability management, and network protection. Security incidents are categorized as programming issues, infrastructure problems, process flaws, and organizational vulnerabilities. Specific examples are given under each category, such as wrong PIN verification, physical credit card skimming, unverified address changes, and bank reset clerk authority abuse. The importance of security for banking and tackling electronic commerce fraud is also highlighted.

Running head HOW TO AVOID INTERNET SCAMS AT THE WORKPLACE 1 .docx

wlynn1

Running head: HOW TO AVOID INTERNET SCAMS AT THE WORKPLACE 1 How to avoid internet scams at the workplace Christophe Bassono CIST3000: Advanced Composition IS&T Amanda L. Gutierrez, M.S. & M.A. UNO-Fall 2018 HOW TO AVOID INTERNET SCAMS AT THE WORKPLACE 2 Online Fraud: How to Avoid Internet Scams in the Workplace This section outlines how the researcher envisions presenting the report. The outline demonstrates the different sections in which the report will be broken into and the information that will be contained in each section Introduction Definition Online fraud refers to deceitful schemes that are done using the internet. Online fraud may come in the form of financial theft, identity theft or a combination of both. History of Online Fraud An influx of online fraud began to be experienced in the 1990s with the increased technology use and e-commerce. In the beginning, online fraud was done by using the names of famous celebrities of the time to commit internet crimes. Over time, more technical and sophisticated plans were developed such as creating card-generator applications with real credit card numbers, setting up dummy merchant websites and mass identity theft. Today, despite attempts by various governments to regulate and mitigate online fraud, more sophisticated online fraud schemes have been established ranging from credit card fraud to phishing, hacking, and identity theft (Saeger & Probert, 2015). In the recent past, computer fraud has evolved through a series of advancements outplaying the traditional security defenses such as the two-factor authentication, antivirus, and SSL encryption in the process. Zeus and SpyEye are the most common attack tools used by hackers since they support the gathering of vast volumes of extremely sensitive authentication data. It has been established that no single application is immune to attacks and the malicious attackers are focusing more on online banking accounts because they offer HOW TO AVOID INTERNET SCAMS AT THE WORKPLACE 3 most direct payoff. Online fraud is based on three core technologies: the botnet controllers capable of handling hundreds of thousands of bots, highly effective data collection, and sophisticated Trojans that are updateable. Form grabbing for PCs running IE/Windows has been a simplified approach for fraud. The technique helps attackers to extract data within browsers. The deployment of form grabbing on compromised PCs allowed hackers to obtain numerous numbers of online bank account IDs and passwords. The password-based authentication was termed no longer safe for online banking prompting the introduction of two-factor authentication (Mellinger, 2011). Nevertheless, criminals still found the loophole that helps them to challenge the security of two-factor authentication through web injects. Malicious attackers that promote online fraud have created various techniques.

Phishing attack seminar presentation

AniketPandit18

phishingattackseminarpresentation-211230055252.pdf

chauhan323234

Phishing is a type of social engineering attack that attempts to acquire sensitive information like login credentials and credit card numbers by pretending to be a trustworthy entity. The seminar covered the history of phishing attacks since the 1990s, typical phishing scenarios, different types of phishing like email, spear, voice and clone phishing with examples. Statistics showed that phishing attacks in India are increasing and mainly target the financial, social media and SaaS sectors. The presentation discussed preventions like using strong passwords, installing anti-virus and anti-phishing software. Phishing is punishable by law in India but no single technology can completely stop phishing attacks.

Identity as easy asLMNOP

Eric Sachs

This document proposes a new identity framework called "Street Identity" that aims to solve some of the key issues with existing identity solutions like OpenID. It suggests having mobile operators authenticate users and act as attribute providers by verifying personal details like names and addresses from user billing records. This would give websites a way to reliably map digital identities to real-world users. It also provides an incentive for mobile operators to participate by allowing them to charge websites a small "stamp fee" for each identity verification. The framework is presented as having potential demand from industries like email providers, social networks, and universities seeking more secure online identity and account recovery solutions.

Identity as easy as LMNOP

Eric Sachs

This document proposes a new identity framework called "Street Identity" that aims to solve some of the key issues with existing identity solutions like OpenID. It suggests having mobile operators authenticate users and act as attribute providers by verifying personal details like names and addresses from user billing records. This would give websites a way to map OpenID logins to real-world identities. It also provides an incentive for mobile operators to participate by allowing them to charge websites a small "stamp fee" for performing identity checks. The framework is presented as having potential demand from industries like email providers, social networks, and universities seeking more secure online identity solutions.

Cyber Crimes Forensics

sayansambit

This document discusses cyber crimes and forensic techniques. It begins by defining several common types of cyber crimes such as computer viruses, denial of service attacks, and malware. It then examines specific cyber crimes like cyber stalking, fraud, and cyber terrorism. The document also explores forensic techniques used to investigate cyber crimes, including digital forensics, computational forensics, and mobile device forensics. It analyzes the business implications of cyber crimes and data breaches. Finally, the document reviews measures taken in India to address cyber crimes and the major antivirus software vendors that are helping to combat cyber threats.

Review on Fraud Detection in Electronic Payment Gateway

IRJET Journal

This document reviews fraud detection in electronic payment gateways. It begins with an abstract that discusses how credit card fraud has increased with the rise of electronic commerce and online payments. It then provides background on payment gateways and discusses common types of credit card fraud like stolen cards, phishing, and internal theft. The literature review covers previous research on using techniques like hidden Markov models, support vector machines, and fingerprint recognition for fraud detection. The proposed system would add an additional layer of security to online transactions by generating a secret code and one-time password for each transaction and only proceeding if the user provides the correct code and password. This is intended to help verify the authenticity of transactions and reduce fraudulent activity.

Excel vs fraud an analysis saran kumar u

SBS AND COMPANY LLP, CHARTERED ACCOUNTANTS

This document summarizes a presentation on using Microsoft Excel to detect fraud. It discusses how Excel can be used by fraudsters to manipulate numbers but also how Excel techniques can help detect manipulated numbers. It provides case studies of how simple errors in Excel like merged cells or SUM functions can reveal fraud. The document also discusses data analysis features in Excel like pivot tables and functions like SUMIF that are useful for analysis. Finally, it introduces Benford's Law, which states that in large real-world data sets the leading digit is not uniformly distributed from 1 to 9 but follows a specific logarithmic distribution, and how deviations from this distribution can be a red flag for fraudulent data.

Identity, Authentication, and Programmable Telecoms

Alan Quayle

Abhijeet Singh, Senior Product Manager, Telesign Session is divided into 3 parts, based on use cases: Registration fraud. Identifying fake users, preventing bulk account creation, etc. ATO (Account TakeOver). Preventing ATO fraud through phone hijacking attacks like SIM Swap, Porting attacks, call forwarding, etc. IRSF (International Revenue Sharing Fraud) attacks on enterprises. Registration to SIP trunking.

Detecting Wire Fraud in Real-Time

Laurent Pacalin

Identity Theft Investigator Training

SLINGR

This document provides an overview of identity theft, including statistics on its prevalence and impact on victims. It discusses common types of identity theft like credit card fraud and fraudulent documents. Methods used by identity thieves are outlined, along with tips for prevention. Investigation techniques for identifying thieves are also summarized, such as examining documents, following electronic trails, and using forensic analysis of computers.

Mit1

Prachyanun Nilsook

The document discusses topics related to information technology management including: - The top billionaires in the world and their businesses - Young billionaires and the industries they work in - Top Thai billionaires and their industries - Reasons for studying information technology management - Generations of business management and how they relate to technology - Information management strategies for organizations in Thailand

Bsa aml protection

Zach Romans

PRESENTATION ON MOBIKWIK AND CONSUMER ADOPTION IN MOBILE WALLET

Md Sadique Suleman

Similar to Cyber Crime Management (20)

RSA Conference 2016 Review

Real-time fraud detection

IT ACT 2000

Sheriff presentation to Saratoga City Council December 6th

Smart sms

Computer Security in Banking and bookkeeping

Running head HOW TO AVOID INTERNET SCAMS AT THE WORKPLACE 1 .docx

Phishing attack seminar presentation

phishingattackseminarpresentation-211230055252.pdf

Identity as easy asLMNOP

Identity as easy as LMNOP

Cyber Crimes Forensics

Review on Fraud Detection in Electronic Payment Gateway

Excel vs fraud an analysis saran kumar u

Identity, Authentication, and Programmable Telecoms

Detecting Wire Fraud in Real-Time

Identity Theft Investigator Training

Mit1

Bsa aml protection

PRESENTATION ON MOBIKWIK AND CONSUMER ADOPTION IN MOBILE WALLET

More from Rahul Neel Mani

7th Annual DynamicCISO Summit & Excellence Awards 2020 Report

Rahul Neel Mani

TweetChat - A Grey Head Digital Initiative

Rahul Neel Mani

Cybersecurity: Glimpses from the 2017

Rahul Neel Mani

5th Annual DynamicCISO Summit 9-10 March 2018, Mumbai

Rahul Neel Mani

The document announces a CISO Summit for top information security professionals in India. It will include the unveiling of a security report by Ernst & Young, panels on key issues, and recognition of outstanding work in the industry. A two-day conference will feature international and domestic speakers discussing contemporary topics like malware, social engineering, and cybersecurity. It is intended for by-invitation only with a curated audience of 100 security professionals.

CIO Productivity Conclave 2017

Rahul Neel Mani

Being a Digital Industrial By Anthony Thomas, Group Chief Information Officer...

Rahul Neel Mani

This document discusses GE's strategy around digital industrial transformation. It outlines that GE is building digital content and reforming IT to simplify culture and leverage trusted partnerships between industrial companies. GE is meeting customers with digital twins and physics analytics to drive productivity gains. The value to customers is huge through connected machines that can eliminate billions in waste. GE is executing both vertically within industries like aviation and horizontally across them with solutions on its Predix operating system.

Key Imperatives for the CIO in Digital Age By Lalatendu Das Digital VP, Assoc...

Rahul Neel Mani

Ravi Shankar Prasad, India's Minister of Information & Technology, stated that India is on the cusp of a digital revolution. India has the 2nd largest number of internet users in the world, which is growing rapidly. Mobile data prices in India have fallen sharply by 56% per year on average. Initiatives like Jan Dhan bank accounts, Aadhaar digital ID, and the growth of mobile are ushering in a more paperless era. Rapid digitization can unlock substantial value for organizations through improvements in areas like customer satisfaction, stock performance, and operating income. However, most organizations are not ready for the speed and flexibility required to become digital leaders.

Traversing the Digital Vortex, Lux Rao, Director & Leader, Digital Transforma...

Rahul Neel Mani

This document discusses how digital disruption is transforming industries and the need for companies to build digital business agility. It notes that digital technologies like the Internet of Things, cloud, mobile and big data are enabling new digital business models and increasing competitive threats. The document advocates that companies simplify processes, automate operations, use data insights to optimize decisions and build a digital ready infrastructure in order to gain agility and counter digital disruption. It provides examples of how companies in various industries can create better customer experiences through digital transformation.

Mobile First Healthcare: Chris Kozup Aruba (HPE)

Rahul Neel Mani

IT to IoT: The Journey to Nextgen - By Rajesh Batra

Rahul Neel Mani

Enabling the Future of Healthcare Through Integration and Interoperability: V...

Rahul Neel Mani

Can India Really Achieve the Stiff Target of Digital Healthcare?

Rahul Neel Mani

Becoming Future Ready: Building New Capabilities to Thrive

Rahul Neel Mani

Who Will Manage the Growing Web: Growing Internet and Shortfall of Cybersecur...

Rahul Neel Mani

The document discusses the growing number of websites and internet users, with internet traffic expected to greatly increase by 2017. It notes that many organizations currently have a shortage of cybersecurity skills, especially in the areas of threat detection and incident response. Finding qualified cybersecurity professionals is also difficult, as the skills gap in cybersecurity continues to be a significant problem according to surveys.

Preventing Social Engineering Attacks: The Critical Elements

Rahul Neel Mani

Threat Exposure Management - Reduce your Risk of a Breach

Rahul Neel Mani

The document discusses Rapid7's security data and analytics solutions that help organizations shift to a risk-based security approach. It summarizes Rapid7's products like Nexpose for vulnerability management, Metasploit Pro for penetration testing, AppSpider for web application security testing, and InsightUBA for user behavior analytics and detection of compromised users. Rapid7 aims to help customers revolutionize cybersecurity practices through prevention, detection, and response capabilities enabled by its technology platform and products.

Challenges of Vulnerability Management

Rahul Neel Mani

This document discusses Atos India's vulnerability management process. It outlines that vulnerability management is the process of identifying security weaknesses, evaluating risks, and remediating issues. Atos manages over 13,000 IT systems and 2,200 critical assets. Their vulnerability management cycle involves scanning for vulnerabilities, evaluating and prioritizing them, developing remediation plans, patching systems, and confirming issues are resolved. In 8 months using this process, Atos reduced vulnerabilities by 78%, outdated systems by 36%, and improved their compliance and customer confidence. They continue improving by monitoring new threats and evaluating team performance.

More from Rahul Neel Mani (17)

7th Annual DynamicCISO Summit & Excellence Awards 2020 Report

TweetChat - A Grey Head Digital Initiative

Cybersecurity: Glimpses from the 2017

5th Annual DynamicCISO Summit 9-10 March 2018, Mumbai

CIO Productivity Conclave 2017

Being a Digital Industrial By Anthony Thomas, Group Chief Information Officer...

Key Imperatives for the CIO in Digital Age By Lalatendu Das Digital VP, Assoc...

Traversing the Digital Vortex, Lux Rao, Director & Leader, Digital Transforma...

Mobile First Healthcare: Chris Kozup Aruba (HPE)

IT to IoT: The Journey to Nextgen - By Rajesh Batra

Enabling the Future of Healthcare Through Integration and Interoperability: V...

Can India Really Achieve the Stiff Target of Digital Healthcare?

Becoming Future Ready: Building New Capabilities to Thrive

Who Will Manage the Growing Web: Growing Internet and Shortfall of Cybersecur...

Preventing Social Engineering Attacks: The Critical Elements

Threat Exposure Management - Reduce your Risk of a Breach

Challenges of Vulnerability Management

Recently uploaded

Microsoft - Power Platform_G.Aspiotis.pdf

Uni Systems S.M.S.A.

Data structures and Algorithms in Python.pdf

TIPNGVN2

UiPath Test Automation using UiPath Test Suite series, part 5

DianaGray10

Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...

James Anderson

Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management. The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM). Speakers: Bob Boule Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle. Gopinath Rebala Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.

Large Language Model (LLM) and it’s Geospatial Applications

Rohit Gautam

National Security Agency - NSA mobile device best practices

Quotidiano Piemontese

Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf

Malak Abu Hammad

Discover how MongoDB Atlas and vector search technology can revolutionize your application's search capabilities. This comprehensive presentation covers: * What is Vector Search? * Importance and benefits of vector search * Practical use cases across various industries * Step-by-step implementation guide * Live demos with code snippets * Enhancing LLM capabilities with vector search * Best practices and optimization strategies Perfect for developers, AI enthusiasts, and tech leaders. Learn how to leverage MongoDB Atlas to deliver highly relevant, context-aware search results, transforming your data retrieval process. Stay ahead in tech innovation and maximize the potential of your applications. #MongoDB #VectorSearch #AI #SemanticSearch #TechInnovation #DataScience #LLM #MachineLearning #SearchTechnology

Full-RAG: A modern architecture for hyper-personalization

Zilliz

Mike Del Balso, CEO & Co-Founder at Tecton, presents "Full RAG," a novel approach to AI recommendation systems, aiming to push beyond the limitations of traditional models through a deep integration of contextual insights and real-time data, leveraging the Retrieval-Augmented Generation architecture. This talk will outline Full RAG's potential to significantly enhance personalization, address engineering challenges such as data management and model training, and introduce data enrichment with reranking as a key solution. Attendees will gain crucial insights into the importance of hyperpersonalization in AI, the capabilities of Full RAG for advanced personalization, and strategies for managing complex data integrations for deploying cutting-edge AI solutions.

RESUME BUILDER APPLICATION Project for students

KAMESHS29

Essentials of Automations: The Art of Triggers and Actions in FME

Safe Software

In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation. We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios. Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!

Communications Mining Series - Zero to Hero - Session 1

DianaGray10

This session provides introduction to UiPath Communication Mining, importance and platform overview. You will acquire a good understand of the phases in Communication Mining as we go over the platform with you. Topics covered: • Communication Mining Overview • Why is it important? • How can it help today’s business and the benefits • Phases in Communication Mining • Demo on Platform overview • Q/A

GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...

Neo4j

Dr. Sean Tan, Head of Data Science, Changi Airport Group Discover how Changi Airport Group (CAG) leverages graph technologies and generative AI to revolutionize their search capabilities. This session delves into the unique search needs of CAG’s diverse passengers and customers, showcasing how graph data structures enhance the accuracy and relevance of AI-generated search results, mitigating the risk of “hallucinations” and improving the overall customer journey.

Epistemic Interaction - tuning interfaces to provide information for AI support

Alan Dix

Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024 https://alandix.com/academic/papers/synergy2024-epistemic/ As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

Albert Hoitingh

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...

James Anderson

Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!

SOFTTECHHUB

As the digital landscape continually evolves, operating systems play a critical role in shaping user experiences and productivity. The launch of Nitrux Linux 3.5.0 marks a significant milestone, offering a robust alternative to traditional systems such as Windows 11. This article delves into the essence of Nitrux Linux 3.5.0, exploring its unique features, advantages, and how it stands as a compelling choice for both casual users and tech enthusiasts.

Removing Uninteresting Bytes in Software Fuzzing

Aftab Hussain

Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process. In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds. - These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.

20240607 QFM018 Elixir Reading List May 2024

Matthew Sinclair

GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...

Neo4j

Leonard Jayamohan, Partner & Generative AI Lead, Deloitte This keynote will reveal how Deloitte leverages Neo4j’s graph power for groundbreaking digital twin solutions, achieving a staggering 100x performance boost. Discover the essential role knowledge graphs play in successful generative AI implementations. Plus, get an exclusive look at an innovative Neo4j + Generative AI solution Deloitte is developing in-house.

Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf

Paige Cruz

Monitoring and observability aren’t traditionally found in software curriculums and many of us cobble this knowledge together from whatever vendor or ecosystem we were first introduced to and whatever is a part of your current company’s observability stack. While the dev and ops silo continues to crumble….many organizations still relegate monitoring & observability as the purview of ops, infra and SRE teams. This is a mistake - achieving a highly observable system requires collaboration up and down the stack. I, a former op, would like to extend an invitation to all application developers to join the observability party will share these foundational concepts to build on:

Recently uploaded (20)

Microsoft - Power Platform_G.Aspiotis.pdf

Data structures and Algorithms in Python.pdf

UiPath Test Automation using UiPath Test Suite series, part 5

Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...

Large Language Model (LLM) and it’s Geospatial Applications

National Security Agency - NSA mobile device best practices

Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf

Full-RAG: A modern architecture for hyper-personalization

RESUME BUILDER APPLICATION Project for students

Essentials of Automations: The Art of Triggers and Actions in FME

Communications Mining Series - Zero to Hero - Session 1

GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...

Epistemic Interaction - tuning interfaces to provide information for AI support

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...

Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!

Removing Uninteresting Bytes in Software Fuzzing

20240607 QFM018 Elixir Reading List May 2024

GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...

Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf

Cyber Crime Management

1. Cyber Crime Management by Dr. Triveni Singh ASP, UP STF

2. Agenda Major Frauds Communication Media Telecommunication Issue Database Management Legal and Regulatory Perspective

3. 3

4. Major Frauds Cheap Loans BTS Tower Jobs Holidays Fake E-Commerce Site Insurance Frauds

5. 5 PTI Coverage ICICI Prudential - Mail Spoofing Case

11. Cases S. No No. of Victims Total No. of Arrests Fraud Amount Date Description of Work 1 1500 87 1.25 Cr 12/08/2015 ICICI Prudential Case – Spurious Calls / Fake Calls Fraud (Mail Spoofing) 2 17 5 1 Cr 17/01/2015 BRL Shine.com Fraud 3 76 2 60 Lac 25/03/2015 IG Naukri.Com Fraud 4 1 3 - 29/03/2015 PCS Exam Fraud 5 2500 3 4 Cr 16/04/2015 Online Billing System Fraud

12. Contd… S. No No. of Victim s Total No. of Arrests Fraud Amount Date Description of Work 6 4560 21 23 Cr 09/05/2015 Telecom Tower Fraud 7 37 12 2.22 Cr 25/05/2015 CPMT Exam Fraud 8 5000 59 16 Cr 15/06/2015 Online Job Frauds (OTP) 9 200 1 85 Lakhs 16/01/2015 UP Sarvagramin Bank Fraud (Phishing Site)

13. Contd.. S. No No. of Victims Total No. of Arrests Fraud Amount Date Description of Work 10 1 1 - 26/08/2015 Social Profile Hacked 11 7 1 35 Lacs 24/09/2015 Piracy 12 922 2 1.85 Cr 07/10/2015 Fake Jobs Racket, Basti 13 3046 83 15 Cr 14/10/2015 Laxmi Nagar, Fake Call Centre Racket 14 247 2 5 Cr 12/09/2015 Results Manipulation, BSF Lower Service, Lucknow

14. S. No No. of Victims Total No. of Arrests Fraud Amount Date Description of Work 10 300 5 50 Lakh 14th March 2016 Cheque Cloning Case 11 5000 2 25 crore 5th March 2016 Fake Insurance Racket 12 1 2 53 lakhs 20th December Fake Job Racket 13 500+ 40 12 Crore 5th January, 2016 Fake Insurance Racket 14 350+ 20 Crore 10th December 2015 Fake Call Centre Racket

15. S. No No. of Victims Total No. of Arrests Fraud Amount Date Description of Work 10 125 3 53 Lakhs 10th March 2016 Job Racket 11 5000 121 25 crore 5th March 2016 Fake Insurance Racket 12 1 2 50 lakhs 15th March 2016 Cheque Cloning Racket 13 20 2 18 Lakhs 6th April, 2016 Bank of Baroda Fraud 14 350+ 8 20 Crore 13th May 2016 Railway Job Racket

16. Web Site PRI VoIP Call Communication Media Mobile Phones Land Line VoIP PRI Lines Website

17. Paid Access Employee Hacking 1. Insurance Company 2. Job Portals 3. Bank 4. Tour Operators 5. Online Crawler. Data Vendors Darkode Database Database Management

18. •IMEI •MAC Address •IP address Spoofing Website Payment Gateway (Scan Document) Whois No KYC Domain Registration Technical Challenges Call SMS Mail Whatsapp & VoIP Logs & Server

19. Telecommunication Issues Source Port Destination Port NAT Several SDR IP Address VoIP Logs Mac Filtering Logs IP version 4 vs IP version 6 Mac Address Port Different Format of Different Operators

20. Regulatory Issues PPI License by RBI (Minimum KYC) Basic (Bank account) KYC SIM (Telecom) KYC No Physical Verification No Central Database Payment Gateway KYC Banking Database of Different Vendors

21. A. IT Act 43 (A) B. IT Act 69 (1) (Interception monitoring and Decryption C. IT Act 67 (C) D. IT Act 72 (A) Disclosure E. IT Act 85 F. Company Act, 2013, Sec 477 1. Cyber Cafe Rules Implementation 2. Jurisdictional Conflict 3. MLAT/LR Why to be serious?? A. ISO 27001 B. PCI-DSS FIR

22. Fraud ManagementFraud Management 22

23. Thank You

Cyber Crime Management

Recommended

Recommended

More Related Content

Viewers also liked

Viewers also liked (19)

Similar to Cyber Crime Management

Similar to Cyber Crime Management (20)

More from Rahul Neel Mani

More from Rahul Neel Mani (17)

Recently uploaded

Recently uploaded (20)

Cyber Crime Management