Friday July 3rd, 2020 8:47AM

Atlanta cybercrime experts investigating Equifax hack

By The Associated Press

ATLANTA (AP) — The federal investigators looking into the breach that exposed personal information maintained by the Equifax credit report company are used to dealing with high-profile hacks and the challenges they present.

The U.S. attorney's office and FBI in Atlanta have prosecuted developers and promoters of the SpyEye and Citadel malware toolkits, used to infect computers and steal banking information. They've helped prosecute a hack into Scottrade and ETrade that was part of an identity theft scheme, and aided the international effort that in July shut down AlphaBay, the world's largest online criminal marketplace.

The U.S. Attorney's office has confirmed that, along with the FBI, it is investigating the breach at Atlanta-based Equifax, which the company said lasted from mid-May to July and exposed the data of 145 million Americans. Neither agency would discuss Equifax, but their cybercrime teams shared insights about the difficulties of cybercrime cases.

"They are challenging, and the success stories are rare," said prosecutor Steven Grimberg, who leads the Atlanta U.S. attorney's office cybercrime unit, created last year to fight the growing threat. For every conviction there may be 10 times as many that don't end successfully, he said.

Atlanta has become a hub for cybercrime prosecution in large part because of a proactive and aggressive local FBI team, and because U.S. attorneys have committed the necessary resources in recent years, Grimberg said.

___

WHO'S BEHIND THE KEYBOARD?

Identifying who's responsible is a key difficulty: Cybercriminals use aliases and operate on the dark web, in corners of the internet reached using special software, where access is invite-only.

Investigators have infiltrated some of these online forums and can sometimes engage cybercriminals there, said FBI Supervisory Special Agent Chad Hunt, who oversees one of FBI Atlanta's cyber investigation squads. Once they obtain some information, they can use search warrants to get other data, such as business records or credit card transactions, to match the online alias to a real person.

Even extremely sophisticated cybercriminals sometimes slip up or collaborate with someone who's less careful, Hunt said.

"If we're looking at somebody for a while, eventually they'll make a mistake," he said. "So even if they are using high-quality encryption, eventually they'll do something stupid."

___

UNCOOPERATIVE FOREIGN GOVERNMENTS

Even when a cybercriminal's identity is pinpointed, arrests can take time. Many operate in countries that won't extradite to the U.S. But the FBI continues monitoring these suspects and can catch them if they travel, said Assistant Special Agent in Charge Ricardo Grave de Peralta, who oversees the Atlanta office's cyber investigation squads.

"A lot of these people are in places that aren't so great and they like to go on vacation, and we're happy to meet them in a third location and perhaps bring them to a second vacation here in the United States, all expenses paid," he said with a smile.

Even with friendly foreign governments, extraditions can take time: Often, the merits of a case are essentially litigated in the process, so that authorities in the other country are satisfied the incriminating evidence is solid, Grimberg said.

___

DEALS AND COOPERATION

Once confronted with evidence against them, some cybercriminals decide to plead guilty and work with prosecutors instead of going to trial.

Their language skills, technical expertise and ability to communicate on online forums and sites open exclusively to cybercriminals make their cooperation invaluable, sometimes leading directly to new prosecutions, Grimberg said.

The government is committed to being as transparent as possible about that cooperation, especially when people get lighter sentences as a result, Grimberg said, but details are often sealed because cooperators fear repercussions.

___

MEANINGFUL SENTENCES

Prosecutors said the SpyEye malware caused close to $1 billion and Citadel more than $500 million in harm to individuals and financial institutions worldwide.

Because the scope of harm can be huge, federal sentencing guidelines often allow for a life-in-prison sentence.

Prosecutors ask for sentences tough enough to send a warning to others, and to discourage the person from returning to cybercrime when they get out. But because cybercriminals are frequently young, have no criminal history and the crimes aren't violent, prosecutors rarely ask for life, Grimberg said.

One hacker involved in SpyEye's development got nine-plus years in prison while another got 15 when sentenced last year, and a Citadel developer got five in July. They weren't ordered to reimburse victims.

That highlights another challenge: Despite financial losses, prosecutors frequently ask judges to find that it is impractical or overly cumbersome to impose restitution. Tracing the affected IP addresses to identify possible victims would be difficult, Grimberg said, and U.S. authorities can't force them to pay once they return to their home countries.

___

WORKING WITH THE PRIVATE SECTOR

Investigators and prosecutors in Atlanta work to establish relationships with companies before anything bad happens, which can make them more comfortable if there is a problem. But companies may hesitate to contact law enforcement because they worry about reputational damage, actions from civil authorities, lawsuits, and the exposure of trade secrets or sensitive information.

The former head of Equifax told members of Congress last month that the company was cooperating with the FBI and state agencies, but Equifax has suffered at least some of these consequences after failing to repair a known security weakness for months this year. Digital burglars had access to the company's computer systems for 11 weeks before Equifax discovered the hack July 29. The company then waited until Sept. 7 before issuing a public alert, saying they hadn't understood until then just how much information had been stolen.

  • Associated Categories: Associated Press (AP), AP Business, AP Business - Corporate News, AP Online - Georgia News, AP Online Headlines - Georgia News
© Copyright 2020 AccessWDUN.com
All rights reserved. This material may not be published, broadcast, rewritten, or redistributed without permission.
Dubai Air Show opens with Emirates' $15.1B Boeing buy
The biennial Dubai Air Show has opened with hometown long-haul carrier Emirates making a $15.1 billion buy of Boeing 787-10 Dreamliners
9:16AM ( 11 minutes ago )
Spanish PM urges Catalans to vote separatists out of office
Spanish Prime Minister Mariano Rajoy is urging Catalans to oust separatists from the regional parliament in snap elections he called for December
9:12AM ( 15 minutes ago )
British govt accused of hurting case of woman jailed in Iran
Britain says Foreign Secretary Boris Johnson has spoken to the husband of a British woman imprisoned in Iran, with the government under pressure to step up efforts to free her
9:06AM ( 21 minutes ago )
Associated Press (AP)
The Latest: Trump, Duterte meet in Manila
President Donald Trump is seated alongside Philippine President Rodrigo Duterte at a gala celebrating the 50th anniversary of the Association of Southeast Asian Nations.
7:33AM ( 1 hour ago )
Supplies headed to space station after Virginia launch
A load of supplies is headed to the International Space Station, this time from Virginia
7:20AM ( 2 hours ago )
The Latest: Azerbaijan Airlines announces $1.1B Boeing buy
Azerbaijan Airlines says it will buy five Boeing 787-8s and two other freighter aircraft, a deal worth over $1.1B
5:54AM ( 3 hours ago )
AP Business
The Latest: Warner Bros. suspends "Supergirl" showrunner
"Supergrirl' and "Arrow" executive producer Andrew Kreisberg has been suspended amid sexual harassment, misconduct accusations by 19 former and current employees
7:23PM ( 14 hours ago )
Emails could provide answers at ex-state auditor's new trial
Former Washington state Auditor Troy Kelley, whose federal fraud trial last year ended with an acquittal on one count and a deadlocked jury on more than a dozen others, will be in a courtroom once again as prosecutors try him a second time
11:45AM ( 21 hours ago )
The Latest: Producer denies 'ER' actor's molestation claim
The Latest: Director-producer denies Anthony Edwards' molestation claims
11:16PM ( 1 day ago )
AP Business - Corporate News
Gas prices decreasing in Georgia
The average gas price in Georgia has decreased more than 30 cents over the past month.
7:50AM ( 3 weeks ago )
Collapsed interstate bridge in Georgia reopens to traffic
A key section of interstate highway through Atlanta has partially reopened, six weeks after a highway bridge collapsed because of a large fire.
7:41PM ( 5 months ago )
Cagle promises 500,000 new jobs in Georgia governor campaign
Casey Cagle will launch his campaign for governor on Sunday with a pledge to add half a million new jobs in Georgia in four years if voters choose him to replace term-limited Gov. Nathan Deal.
12:11PM ( 6 months ago )
AP Online - Georgia News
Dubai Air Show opens with Emirates' $15.1B Boeing buy
The biennial Dubai Air Show has opened with hometown long-haul carrier Emirates making a $15.1 billion buy of Boeing 787-10 Dreamliners
9:16AM ( 12 minutes ago )
Spanish PM urges Catalans to vote separatists out of office
Spanish Prime Minister Mariano Rajoy is urging Catalans to oust separatists from the regional parliament in snap elections he called for December
9:12AM ( 16 minutes ago )
British govt accused of hurting case of woman jailed in Iran
Britain says Foreign Secretary Boris Johnson has spoken to the husband of a British woman imprisoned in Iran, with the government under pressure to step up efforts to free her
9:06AM ( 22 minutes ago )
Turkey denies report of plan to kidnap cleric Gulen from US
Turkey has dismissed as "ludicrous and groundless" a report that Turkish officials may have discussed kidnapping a U.S.-based Muslim cleric in exchange for millions of dollars
8:59AM ( 29 minutes ago )
Veterans Day marked with parades, somber ceremonies
Americans honored their military veterans Saturday with a parade in the wintry cold of New York City, where one World War II vet thanked onlookers for remembering, and in a somber ceremony in a Texas bloodied by a massacre
8:30AM ( 58 minutes ago )