- Microsoft lays out SQL Server road map
- Credit card skimming
- Nortel's stock market capitalization plummets
- The Obama campaign's Search Engine to Nowhere
- Will Apple be forced to make more money?
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:Application Performance Solutions | App Performance | Networking Solution | SafeGuard Enterprise Solution Center | SOA | Test your Web Filter | Value of WDS
Fear, uncertainty and doubt - or any combination of those feelings - usually let cybercriminals off the hook.
A January report from the U.S. Joint Council on Information Age Crime shows that 36% or less of organizations polled report computer-related crimes to law enforcement. Yet law enforcement officials and IT security experts agree that taking the proper steps after malicious activity will help secure breached networks, prevent future attacks - and even identify and punish criminals.
So, what should you do if you are the victim of cybercrime? Here are 10 key reactions.
Experts urge IT managers to resist going into hiding and advise them to report the cybercrime incident to all or one of the following groups, depending on the circumstances of the crime.
1. Contact law enforcement agencies: The FBI, the U.S. Secret Service and the Federal Trade Commission (FTC) each track, investigate and prosecute cybercrime, depending on the act. For example, the FBI and Secret Service investigate cases dealing with hacking, intellectual property theft, piracy and password trafficking, and the FTC deals with cases of Internet fraud and spam.
"Victims must report the crime as soon as they learn about it. The earlier they report it, the more likely we can solve it," says Gail Marcinkiewicz, a spokeswoman for the FBI's Boston field office.
2. Reach out to industry organizations: Groups such as Carnegie Mellon University Software Engineering Institute's CERT Coordination Center, the Internet Fraud Complaint Center and the Anti-Phishing Working Group would like to be informed of cybercrimes and malicious computing activity such as viruses, worms and distributed denial-of-service (DoS) attacks.
"There are advantages when people are willing to even just report the activity, without seeking prosecution or publicity," says Marty Lindner, a senior member of the technical staff at U.S. CERT. "The experience can be pushed out to others so they know what to look for."
3. Inform other potential victims: Even if a company or an individual wants to keep quiet about an attack, it is wise - and in some cases required by law - to alert others at risk.
For example, the University of California at Berkeley recently revealed that a hacker attack might have exposed the personal data of more than a million state residents. Under the state's SB1386 anti-identity theft law, passed in 2003, state agencies and businesses maintaining computerized data are required to report any breach of security that could have compromised personal data such as Social Security or license numbers or name and addresses coupled with credit card information.
"It is a corporate responsibility to report corporate-level fraud," says Erik Laykin, director of IT investigations practice for Navigant Consulting.

Ever since there have been stocks and shares there have been so called "pump 'n' dump" scams. This...
Spyware: Know Your EnemyLike Macavity, the fictional feline in T. S. Eliot's well-known poem, spyware may be considered to...
The Online Shadow Economy: A Billion Dollar Market For Malware AuthorsMalware, meaning computer viruses, trojans and spyware, is about money. The teenagers who wrote...

Microsoft SQL Server has enjoyed phenomenal success as a database server. Its relatively low cost,...
Minimizing the Risk of Information Security Breaches: Best Practices for SOA Governance and Compliance - Live October 21Today's enterprises face more information security risks and vulnerabilities than ever before....
Migrating to Windows Vista: Necessity and OpportunityThe Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...

Discover why Unified Threat Management Firewalls are ready for the enterprise today. High...
The Evolution of Network SecurityWe have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment