Unit III: Cybercrime and Mobile Devices

Introduction to Mobile and Wireless Devices

• Mobile refers to the ability to be on the move, encompassing devices like laptops and mobile phones.
• Wireless involves transmitting voice and data over radio waves, allowing access to enterprise data without fixed connections.
• A mobile application can be wireless or non-wireless, depending on connectivity requirements.
• Fixed wireless networks serve environments like offices or remote locations, while smart client applications work offline with periodic synchronization.

Proliferation of Mobile and Wireless Devices

• Mobile technology includes cellular communication systems, portable devices, and networking equipment.
• The shift from basic communication to multitasking capabilities includes GPS, internet browsing, and gaming.
• Global estimates indicate over 3 billion smartphone users and a workforce of 1.87 billion by 2022.

Types of Mobile Technologies

• SMS (Short Message Service): Widely used for text messaging, allowing messages up to 140 characters, sent via cellular networks.
• MMS (Multimedia Messaging Service): Supports multimedia content like images and videos, extending beyond text-based SMS.
• 3G: Introduced internet access on mobile devices with speeds up to 3 Mbps, enhancing connectivity for smartphones.
• 4G: Offered significant improvements over 3G, allowing HD content streaming and speeds up to 150 Mbps for downloads.
• GSM (Global System for Mobile Communication): Digital cellular technology utilizing various frequency bands for mobile communication.
• CDMA (Code Division Multiple Access): Allows multiple data streams on a single channel simultaneously.
• Wi-Fi: Wireless networking technology enabling data transmission across devices within a Local Area Network.

Use of Mobile Technology

• Enhances telecollaboration, allowing workers to access necessary documents from remote locations.
• Redefines work by providing flexibility, enabling employees to work from anywhere.
• Offers cost savings for businesses through reduced technology needs and increased productivity.

Advantages of Mobile Technology

• Facilitates constant communication and interaction through various applications.
• Simplifies day-to-day tasks such as checking weather and traffic.
• Provides entertainment options and use for legitimate business activities like scheduling meetings.
• Enables mobile payment functionalities, allowing transactions from anywhere.

Disadvantages of Mobile Technology

• Increased dependency on mobile phones leading to reduced personal interactions.
• Privacy risks due to data availability on social media and other platforms.
• Rising costs of mobile devices, detracting from potential investment in education or other resources.

Trends in Mobility

• By 2023, a projected 13.1 billion mobile devices and connections globally.
• Evolution from lower to higher-generation network connectivity with a focus on improved usability.
• Smart mobile technology advances are attracting both users and cybercriminals, highlighting cybersecurity challenges.

Credit Card Fraud in the Mobile Era

• Wireless credit card processing allows convenient transactions in mobile environments but increases fraud risk.
• Traditional fraud techniques include identity theft and financial fraud, utilizing sensitive data for fraudulent accounts.
• Modern techniques focus on skimming, where devices capture card information leading to unauthorized transactions.

Challenges in Fraud Detection

• Large data volumes complicate timely anomaly detection.
• Imbalanced data makes it difficult to identify fraudulent transactions amidst legitimate ones.
• Protecting user privacy while gathering reliable data is essential for effective monitoring.

Solutions to Fraud Challenges

• Implement fast and simple models for anomaly detection to identify fraud quickly.
• Address data imbalance with specific analytical methods.
• Utilize trustworthy sources for training fraud detection models for improved accuracy and efficacy.### Cybercrime Overview
• Cybercrime includes illegal acts targeting computers or networks to steal data, commit fraud, and more.
• Common types of cybercrime: harassment, cyber-stalking, and bullying.

Credit Card Fraud

• Credit card fraud involves unauthorized use of another's card information for purchases or fund withdrawals.
• Elements of credit card fraud include:
  • Fraudulently obtaining or using someone else's card.
  • Using an expired or revoked card with knowledge of its status.
  • Selling goods while knowing the card transaction is unauthorized.

Categories of Credit Card Fraud

• Lost or Stolen Cards: Common and should be reported immediately.
• Account Takeover: Fraudster collects personal info to change bank details and obtain a new card.
• Counterfeit Cards: Cloning existing card information for unauthorized purchases.
• Never Received Cards: New cards stolen from the mail.
• Fraudulent Applications: Using someone else’s information to apply for a credit card.
• Multiple Imprint Fraud: Recording one transaction multiple times on older machines.
• Collusive Merchants: Merchants work with fraudsters to commit fraud.
• MO/TO Fraud: Includes e-commerce, representing a major fraud category in Asia-Pacific.

Preventing Credit Card Fraud

• Record account details securely and report any fraud immediately.
• Avoid lending cards to anyone, including family.
• Shred unneeded documents containing personal information.
• Keep cards separate from wallets to minimize loss.
• Monitor statements regularly for suspicious charges.

Mobile Device Security Challenges

• Mobile devices face unique security risks, including application-based, web-based, network-based, and physical threats.
• Application-based threats: Include malware, spyware, and zero-day vulnerabilities from downloadable applications.
• Web-based threats: Risk includes phishing scams and operating system flaws, due to constant device connectivity.
• Network-based threats: Vulnerable through Wi-Fi, Bluetooth, and cellular networks.
• Physical threats: Loss or theft is a major concern for mobile devices.

Top Mobile Security Threats

• Malicious Apps: Can steal or encrypt data, similar to desktop malware.
• Mobile Ransomware: Encrypts files and demands payment for recovery.
• Phishing: Delivered through various media, including SMS and social media, accounting for the majority of mobile phishing attacks.
• Man-in-the-Middle Attacks: Attackers intercept communications, often on unsecured networks.
• Jailbreaking/Rooting: Gives attackers access to more data by exploiting OS vulnerabilities.
• Device and OS Exploits: Vulnerabilities at lower software levels can be targeted.

Protecting Against Mobile Threats

• Implement a comprehensive mobile threat defense solution for organizations.
• Ensure security across devices, applications, and networks.
• Focus on privacy protection and optimal user experience.

Types of Wireless and Mobile Device Attacks

• Smishing: Fraudulent SMS messages trick users into revealing sensitive data.
• War Driving: Attackers drive around to locate and exploit Wi-Fi access points.
• WEP Attack: Exploits weaknesses in WEP encryption for wireless networks.
• WPA Attack: While offering better security, WPA is still vulnerable to packet analysis.
• Bluejacking: Sending unsolicited messages via Bluetooth.
• Replay Attacks: Interception of data for retransmission to deceive users.
• Bluesnarfing: Accessing information from a victim’s device without detection.

Security Threats to Mobile Devices

• Data Leakage: Occurs when confidential information is unintentionally exposed.
• Unsecured Wi-Fi: Avoid using free Wi-Fi for sensitive transactions.
• Phishing Attacks: Often bundled in malicious emails or texts.
• Weak Passwords: Low-security passwords increase the risk of data breaches.
• IoT Mobile Security: Connected devices pose risks if compromised.

Conclusion

• Awareness and diligent protection practices can significantly reduce the risks associated with mobile and credit card fraud.### Packet Sniffing
• Involves intercepting and analyzing data packets over wireless networks.
• Can capture sensitive information including emails, messages, and web traffic.
• Carried out stealthily, requiring proximity to the victim and technical skills.

Bluejacking

• Sends unsolicited messages to Bluetooth-enabled devices.
• Commonly used for spam, phishing, or malware.
• Does not need a network connection, but requires knowledge of the victim’s Bluetooth address.

SMS Spoofing

• Involves sending fake messages that appear from trusted sources (e.g., banks).
• Used to trick users into revealing personal information or downloading malware.
• Can be executed secretly but requires the victim’s phone number.

Malware

• Software designed to infect devices to steal or damage data.
• Distribution methods include email attachments, downloads, and malicious sites.
• Can be executed remotely, needing a delivery method like phishing.

Conclusion on Wireless Attacks

• Risks include data theft, identity theft, financial loss, and reputational damage.
• Protection measures: strong passwords, updated software, avoiding unsecured networks, and using reputable app stores.
• Businesses should implement firewalls, intrusion detection systems, and employee security training.

Mobile Device Registry Settings

• Microsoft ActiveSync synchronizes Windows mobile devices with PCs and Outlook.
• Supports wireless updates for emails, calendars, notes, and contacts.
• Proper registry settings help protect information flow between devices and applications.

Authentication Service Security

• Mobile security encompasses device security and network security.
• Secure network access involves authentication between devices and servers.
• Common mobile attacks: DoS, traffic analysis, eavesdropping, man-in-the-middle, session hijacking.

Device Security Measures

• Utilize Wireless Application Protocols (WAP) and Virtual Private Networks (VPN).
• MAC address filtering enhances network security.
• Collective tools and techniques are essential in device hardening.

Mutual Authentication

• Addresses vulnerabilities associated with rogue access points.
• Both the client and access point authenticate each other, ensuring secure connections.

Wired Equivalent Privacy (WEP)

• An early Wi-Fi security standard established in 1999.
• Provides authentication and encryption but is outdated and easily compromised.

Wi-Fi Protected Access (WPA/WPA2)

• WPA uses 256-bit keys; WPA2 obligates Advanced Encryption Standard algorithms for enhanced security.
• WPA2 allows longer passwords (up to 63 characters) and has better encryption protocols.

Attacks on Mobile Devices

• Cyber-attacks can disable systems and steal sensitive data.
• Common attack types: malware (including spyware, Trojans, ransomware) and phishing.
• Password attacks exploit user credentials; other threats include SQL injection and Denial of Service (DoS).

Cyber Security Overview

• Cybersecurity has evolved significantly since the 1970s to address increasing cyber threats.
• Encompasses measures to protect hardware, software, and data.
• Essential for maintaining operational integrity against various cyber threats.