Soca in e-crime warning

Phishing and keyloggers highlighted as criminals go after the data

UK law enforcement organisation the Serious Organised Crime Agency (Soca) has warned of the growing threat to firms from e-crime, as criminals step up their efforts to mine sensitive customer data.

The newly released report, UK Threat Assessment of Serious Organised Crime 2008/9, highlights the growing criminal market for data, with social engineering attacks via phishing emails, and infection via keylogging malware the main methods of attack.

Soca said spam emails are often to blame, delivering this type of malware, or containing links to phishing sites.

The report also warns: "Databases containing the personal data of large numbers of customers, client or employees are targeted by criminal hackers who try to overcome security measures protecting the data so they can steal it in bulk."

Soca also recognised the increasingly professional nature of the criminal gangs behind such attacks. "These groups often consist of 10 to 30 online identities, with different roles divided within the group. Each group will typically have an inner circle of more technically advanced and/or experienced members who control access to the attack tools," said the report.