Risk

4/4/2008
04:18 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Internet Fraud Loss For 2007 Tops $239 Million

The dollar loss reported from Internet crime reached an all-time high in 2007, while the number of reported crimes was lower than in each of the last three years.

The dollar loss reported from Internet crime reached an all-time high in 2007, according to the Internet Crime Complaint Center's (IC3) 2007 Internet Crime report.

The IC3 serves to field complaints about online crime on behalf of the Federal Bureau of Investigation and the National White Collar Crime Center.

The IC3 received 206,884 complaints in 2007 through its Web site, fewer than the number submitted in 2006 (207,492), 2005 (231,493), or 2004 (207,449). With the addition of other methods of complaint, IC3 received 219,553 complaints last year.

IC3 referred 90,008 complaints to the appropriate law enforcement authorities for investigation, most of which alleged fraud and financial loss. The dollar loss for referred complaints totaled $239.09 million, with a median loss of $680 per complainant. This represents an increase over the 2006 total of $198.44 million.

James E. Finch, assistant director of the FBI's cyberdivision, appears to believe that a significant number of people are not reporting Internet crimes. "The Internet presents a wealth of opportunity for would-be criminals to prey on unsuspecting victims, and this report shows how extensive these types of crime have become," he said in a statement. "What this report does not show is how often this type of activity goes unreported. Filing a complaint through IC3 is the best way to alert law enforcement authorities of Internet crime."

The report indicates that in complaints that could be linked to a perpetrator, more than 75% of cybercriminals were men and that half resided in California (15.8%), Florida (10.1%), New York (9.9%), Texas (7%), Illinois (3.6%), Pennsylvania (3.5%), or Georgia (3.1%).

When perpetrators were measured per 100,000 people, the District of Columbia had the most, with 99.10 per 100,000, followed by Nevada (65.45), Delaware (41.98), and Florida (40.73).

Counting by country, the United States had the most cybercriminals, with 63.2%, followed by the United Kingdom (15.3%) and Nigeria (5.7%).

It bears repeating that these numbers do not reflect overall Internet crime activity in these countries. Rather, they represent statistics drawn specifically from the more than 90,000 IC3 complaints investigated.

Men reported larger losses than women, with their median losses coming to $765 and $552, respectively.

E-mail was the most common means (73.6%) by which cybercriminals made contact with their victims, followed by Web pages (32.7%), phone contact (18%), and postal mail (10.1%). "The anonymous nature of an e-mail address or a Web site allows perpetrators to solicit a large number of victims with a keystroke," the report explains.

By far the most common type of fraud reported was auction fraud (35.7%) and nondelivery of merchandise (24.9%). Compared with 2006, these figures represent a 20.5% decrease and a 31.1% increase, respectively.

Other types of fraud reported were confidence fraud (6.7%), credit/debit card fraud (6.3%), check fraud (6%), computer fraud (5.3%), identity theft (2.9%), financial institution fraud (2.7%), threat (1.6%), and Nigerian letter fraud (1.1%).

The report notes that auction fraud may be overrepresented among complaints because eBay, the leading online auction site, provides its users with links to the IC3 site as part of its anti-fraud efforts.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
To Be Ready for the Security Future, Pay Attention to the Security Past
Liz Maida, Co-founder, CEO & CTO, Uplevel Security,  9/18/2017
1.9 Billion Data Records Exposed in First Half of 2017
Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/20/2017
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Jan, check this out! I found an unhackable PC.
Current Issue
Security Vulnerabilities: The Next Wave
Just when you thought it was safe, researchers have unveiled a new round of IT security flaws. Is your enterprise ready?
Flash Poll
[Strategic Security Report] How Enterprises Are Attacking the IT Security Problem
[Strategic Security Report] How Enterprises Are Attacking the IT Security Problem
Enterprises are spending more of their IT budgets on cybersecurity technology. How do your organization's security plans and strategies compare to what others are doing? Here's an in-depth look.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.