This is the report published on http://krebsonsecurity.com/
Earlier this week, I wrote about an online data theft service that got hacked. That compromise exposed a user base of mostly young Nigerian men apparently engaged in an array of cybercrime activities — from online dating scams to 419 schemes.
It turned out that many of these guys signed up for the data theft service using the same email address they used to register their Facebook accounts. Today's post looks at the social networks between and among these individuals.
Of the nearly 3,000 BestRecovery users, about 280 of them had Facebook accounts tied to their BestRecovery email addresses. George Mason University associate Professor Damon McCoy and several of his grad students volunteered to scrape those profiles that were open and map their social networks to see if there were any obvious or discernible patterns in the data.
The raw data itself — which ranked the BestRecovery users on number of connections they had to other users — was potentially useful, but difficult to parse into meaningful chunks. Oddly enough, as I was poring over that data I heard from Chris Ahlberg, the CEO of Recorded Future Inc., a Cambridge, Mass. software company that specializes in Web intelligence and predictive analytics. Ahlberg was writing to say that he enjoyed the blog — particularly the posts with data-intensive analyses — and that he'd be delighted to collaborate on a data-rich research project at some point. I told him his timing couldn't have been more serendipitous.
Ahlberg and his team took the raw scraped data sets from the Facebook accounts and ran it through their cyber intelligence applications. They produced some very compelling and beautiful graphs, shown in the report below:
(Read the whole report here
http://krebsonsecurity.com/)
To view the list of email addresses used by Nigerian 'Yahoo' guys, visit the link below to see if you know anyone in this list because I know some people on this list LOL- http://krebsonsecurity.com/wp-content/uploads/2013/09/BestRecoveryEmails.txt
Video Link Here- rtsp://v7.cache6.c.youtube.com/CjYLENy73wIaLQl8Lz0Ar2I0fBMYDSANFEIJbXYtZ29vZ2xlSARSBXdhdGNoYJ2WrLyku-P_UAw=/0/0/0/video.3gp
*I feel the EFCC should have been the one to produce this list not a US company*
0 comments: