A “computer worm” is a computer program that travels across network connections without any user intervention. The worm is usually downloaded by the user through an infected e-mail, chat room, social networking site, or internet website, and then sends copies of itself across an entire network. Computer worms, unlike viruses, do not necessarily cause harm to files on the infected computer; however, in many cases, they can be used to gather private information from the infected computers.
Recently, the New York Times reported on a web gang operating out of St. Petersburg, Russia that is allegedly responsible for spreading a computer worm through Facebook, and purportedly pocketing several million dollars. The gang, known as the Koobface gang, is interesting because the alleged members operate in the open, and their identities are known to computer security investigators and law enforcement officials.
According to sources, the gang operates by inviting Facebook users to watch a funny or sexy video. Once the user clicks on the link, the user gets a message that their Flash software must be updated. If the user agrees to the update, the Koobface worm downloads on to their computer and places the computer on a “botnet.” A “botnet” is a network of infected computers. The computer then receives advertisements for bogus anti-virus software. The malware installed on the computer also monitors users’ web searches. The group purportedly makes money through the sales of the bogus anti-virus software and from selling search information to advertisers.
Data collected through various sources on the group indicates that the group has earned at least $2.5 million per year in each of the years that it has existed. What is interesting about the Koobface gang is that they seem to subscribe to a sort of “honor amongst thieves” mentality, and have vowed to never steal credit card or banking information. Moreover, the group targets individuals who make unwise clicks on Facebook, rather than deploying malware that installs automatically.
Under federal law, pursuant to 18 U.S.C. Section 1030, it is a federal crime to knowingly access a computer or to exceed authorized access to a computer. Depending on the purpose of the access, the damage caused, and the number of prior offenses, computer hacking is punishable by anywhere between one year and twenty years in prison. Hacking offenses on the federal level are usually investigated by the Federal Bureau of Investigation or the Secret Service. However, what makes it difficult to catch and prosecute hackers is the fact that they typically operate in countries that are not very keen on cooperating with the United States in criminal investigations.
This article was written by New Jersey criminal defense lawyer Nace Naumoski.
