Phishing phishers - Observing and tracing organized cybercrime

Second International Conference on Internet Monitoring and Protection, ICIMP 2007

Volumn , Issue , 2007, Pages 3-8

  Birk, Dominik ^a   Gajek, Sebastian ^a   Gröbert, Felix ^a   Sadeghi, Ahmad Reza ^a  

^a RUHR UNIVERSITY BOCHUM   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SUPPORTED COOPERATIVE WORK; CYBERNETICS; IDENTIFICATION (CONTROL SYSTEMS); INTERNET; PROBLEM SOLVING;

CYBER CRIME; FINANCIAL AGENTS; MONEY LAUNDERING; PHISHING VICTIMS;

COMPUTER CRIME;

EID: 35348895913     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICIMP.2007.33     Document Type: Conference Paper

References (41)

1. P. Khanna, "Organized cybercrime has IT security experts scared," 5 July 2005.
2. Anti Phishing Working Group, "Phishing Trend Report(s)," 2007, http: //www.antiphishing.com.
3. Working Group Identity Protection, "Personal communication with Phishing Victims and Financial Agents," 2006, http://www.a-i3.org.
4. G. Borges, "Rechtsfragen des Phishing - Ein Überblick," NJW, p. 3313, 2006, (in German).
5. S. Brenner, "Organized Cybercrime? How Cyberspace May Affect the Structure of Criminal Relationships," North Carolina Journal of Law and Technology, vol. 4, no. 1, 2002.
6. M. D. Goodman and S. W Brenner, "The emerging consensus on criminal conduct in cyberspace," International Journal of Law Infomation Technology, vol. 10, pp. 139-223, 2002.
7. Infopackets Newsletter, "The Word of Today: Phishing," 26 August 2005, http://www.infopackets.com/channels/en/pause_for_thought/ word_of_the_day/2005/20050826_phishing.htm.
8. M. Jakobsson and A. Young, "Distributed Phishing Attacks," Cryptology ePrint Archive, Report 2005/091, 2005, http://eprint.iacr.org/2005/ 091.
9. Working Group Identity Protection, "List of German phishing mails," 2007, https://www.a-i3.org/content/category/5/36/216/.
10. R. Oppliger and S. Gajek, "Effective protection against phishing and web spoofing," in 9th IFIP TC-6 TC-11 Conference on Communications and Multimedia Security, 2005.
11. A. Litan, "Phishing Attacks Leapfrog Despite Attempts to Stop Them," Gartner, November 2006.
12. M. Jakobbson, "Modeling and Preventing Phishing Attacks." in Financial Cryptography, 2005.
13. T. Jagatic, N. Johnson, M. Jakobsson, and F. Menczer, "Social phishing," 2007, to appear in Communications of the ACM.
14. J. Evers, "Phishers get personal," 26 May 2005, http://news.com.com/Phishers+get+personal/2100-7349_3-5720672.html.
15. "Example of purchasable Malware Services - Shadowcrew.com Forum," 2002, http://web.archive.org/web/2002101417523 4/www.shadowcrew. com/forum/viewforum.php?f=2.
16. "Example of purchasable Malware Services - Darkprofits.com Web Site," 2003, http://web.archive.org/web/20030805031336/www.darkprofits.com/ index.php.
17. S. Nomad, "Organized Cybercrime," 2005, http://dc214.defcon. org/notes/june_2005/.
18. J. Leyden, "S'kiddies get into spyware for just 15 dollar," 27 March 2006, http://www.theregister.com/2006/03/27/spyware_diy/.
19. A Joint Report of the US Department of Homeland Security SRI International Identity Theft Technology Council and the Anti-Phishing Working Group, "The crimeware landscape: Malware, phishing, identity theft and beyond," 2006, http://www.antiphishing.org/reports/APWG_CrimewareReport. pdf.
20. President's Commission On Organized Crime, "Organized Crime And Gambling. Record Of Hearing VII. Washington , DC : U.S. Government Printing Office," 1984.
21. R. Bedi, Money Laundering- Controls and Prevention. ISI Publications, 2004.
22. J. M. Myers, "International Strategies to Combat Money Laundering," 1998, international Symposium on the Prevention and Control of Financial Fraud Beijing.
23. R. E. Bell, "An Introductory: Who is Who for Money Laundering Investigators," Journal of Money Laundering Control, vol. 5, pp. 287-295, 2002.
24. U.S. Costums Service - Office of Intelligence Headquarters, "Money Laundering," 1989.
25. J.-B. Ackermann, "Geldwäscherei - Money Laundering. Eine vergle-ichende Darstellung des Rechts und der Erscheinungsformen in den USA und der Schweiz," in Schweizer Schriften zum Bankrecht, ser. Band 12, 1992, (in German).
26. Working Group Identity Protection, "List of emails seeking for financial agents," 2007, https://www.a-i3.Org/content/category/5/57/138/.
27. _, "Italien Software Group Inc: Employment Contract No. 142," 2006, https://www.a-i3.org/images/stories/Download/labourcontract.pdf.
28. _, "STILL: Employment Contract," 2006, https://www.a-i3.org/ images/stories/Download/arbeitsvertrag_still.pdf.
29. M. Mannan and P. van Oorschot, "Using a personal device to strengthen password authentication from an untrusted computer," in Financial Cryptography and Data Security (FC'07), 2007.
30. B. Parno, C. Kuo, and A. Perrig, "Phoolproof Phishing Prevention," in Financial Cryptography and Data Security (FC'06), 2006.
31. D. Florencio and C. Herley, "Stopping a phishing attack, even when the victims ignore warnings," Microsoft Research (MSR), Tech. Rep. MSR-TR-2005-142, 2005.
32. K.-P. Yee, "Designing and Evaluating a Petname Anti-Phishing Tool," 2005, http://cups.cs.cmu.edu/soups/2005/2005posters/23-yee.pdf.
33. N. Chou, R. Ledesma, Y. Teraguchi, D. Boneh, and J. C. Mitchell, "Client-side defense against web-based identity theft," in 11th Annual Network and Distributed System Security Symposium (NDSS '04), 2004.
34. S. Gajek, A.-R. Sadeghi, C. Stueble, and M. Winandy, "Compartmented security for browsers - or how to thwart a phisher with trusted computing," in ARES, 2007, to appear.
35. D. Birk, M. Dornseif, S. Gajek, and F. Gröbert, "Phishing phisherstracing identity thieves and money launderers," Horst Görtz Institute for IT Security, Ruhr University Bochum, Tech. Rep. TR-HGI-01-2006, 2006.
36. L. Spitzner, "Honeytokens: The Other Honeypot," 2003.
37. T. W. Singleton, A. J. Singleton, G. J. Bologna, and R. J. Lindquist, Fraud Auditing and Forensic Accounting. Wiley, 2006.
38. P. J. Leahy, "Anti-phishing Act," 2005, https://www.a-i3.org/ images/stories/recht/us_gesetz.pdf.
39. B. H. Office, "Fraud Bill HL Bill 7," 2005, https://www.a-i3.org/images/stories/recht/brit_gesetz.pdf.
40. M. Pieth, "The Prevention of Money Laundering: A Comparative Analysis," European Journal of Crime, Criminal Law and Criminal Justice, vol. 6, no. 2, 1998.
41. R. Alexander, "EU: The EC Money Laundering Directive," Journal of Money Laundering Control, vol. 2, no. 1, 1998.