Data Broker Hackers Also Compromised NW3C

[InfoSec News <alerts () infosecnews org>]

http://krebsonsecurity.com/2013/10/data-broker-hackers-also-compromised-nw3c/

By Brian Krebs
Krebs on Security
Oct 1, 2013

The same miscreants responsible for breaking into the networks of 
America’s top consumer and business data brokers appear to have also 
infiltrated and stolen huge amounts of data from the National White Collar 
Crime Center (NW3C), a congressionally-funded non-profit organization that 
provides training, investigative support and research to agencies and 
entities involved in the prevention, investigation and prosecution of 
cybercrime.

Last week, KrebsOnSecurity reported that entrepreneurs behind the 
underground criminal identity theft service ssndob[dot]ms also were 
responsible for operating a small but powerful collection of hacked 
computers exclusively at top data brokers, including LexisNexis, Dun & 
Bradstreet and HireRight/Kroll. A closer analysis of the Web server used 
to control that collection of hacked PCs shows that the attackers also had 
at least one infected system for several months this summer inside of the 
NW3c.

Core to the NW3C’s mission is its Investigative Support division, which 
according to the organization’s site “provides timely, relevant and 
effective services to member agencies involved in the prevention, 
investigation and prosecution of economic and high-tech crimes. The 
section has no investigative authority but can provide analytical 
assistance and perform public database searches.”

The NW3C said its analysts are frequently called upon to assist in 
establishing financial transaction patterns, developing possible links 
between criminal targets and associated criminal activity and providing 
link charts, timelines and graphs for court presentations. “Information 
obtained through public database searches can assist investigations by 
locating suspects, establishing property ownership and finding hidden 
assets, just to name a few of the benefits,” the organization’s Web site 
explains.

[...]

--
Find the best InfoSec talent without breaking your
recruiting budget! Post a Job, $99 for 31 days.
Hot InfoSec Jobs - http://www.hotinfosecjobs.com/