Effect Cyber crimes on Business

Definitions of Cyber Crime:

• "It is a criminal activity committed on the internet.

This is a broad term that describes everything from

electronic cracking to denial of service attacks that

cause electronic commerce sites to lose money".

• “Any criminal activity that uses a computer either as

an instrumentality, target or a means for perpetuating

further crimes which come within the range of cyber

crime” 

Reasons for Cyber crimes:

• Capacity to store data in comparatively small space

• Easy to access

• Complex

• Negligence

• Loss of evidence

Types of Cyber Crime

• Hacking

• Denial of Services Attack

• Virus Dissemination

• Spoofing

• Phishing

• Cyber Stalking

Hacking

Hacking in simple terms means illegal intrusion into a computer system without the permission of the computer owner/user.

CREDIT CARD FRAUD

• You simply have to type credit card number into www page off the vendor for online transaction.

• If electronic transactions are not secured the credit card numbers can be stolen by the hackers who can misuse this card by impersonating the credit card owner

NET EXTORTION

• Copying the company's confidential data in order to extort said company for huge amount.

PHISHING

• It is technique of pulling out confidential information from the bank/financial institutional account holders by deceptive means

Actual login page

Phishing email

From: *****Bank [mailto: support@****Bank.com]Sent: 08 June 2004 03:25

To: XYZSubject: Official information from ***** Bank

Dear valued ***** Bank Customer!

For security purposes your account has been randomly chosen for verification. To verify your account information we are asking you to provide us with all the data we are requesting. Otherwise we will not be able to verify your identity and access to your account will be denied.

Please click on the link below to get to the bank secure page and verify your account details. Thank you.

https://infinity.*****bank.co.in/Verify.jsp******Bank Limited

Deceptive login page

LAWS OF CYBER CRIME IN PAKISTAN

• Act No.XVII OF 1996 AN Act to provide for re-organization of

telecommunication system .

• LAW APROVED IN 2002 related to cyber crime

• MINISTRY OF LAW JUSTICE AND HUMAN RIGHTS Islamabad, the

3Ist December 2007

• Pakistan’s cyber crime bill pass in 2007

National Bank Pakistan

• National Bank of Pakistan was established under the National Bank of Pakistan ordinance 1949 and it came into existence on

November 20; 1949.Its main aim was to provide all types of banking services to the government and private sector.

• The bank also handles treasury transactions for the Govt. of Pakistan as agent to State Bank of Pakistan.

SHARE CAPITAL

– Issued Capital

• The bank was setup with an issued capital of Rs.1.5 million.

– Authorized Capital

• Authorized capital of National Bank of Pakistan in 2009 was Rs.2.5 Billion.

– Issued, Subscribed, and Paid-up Capital

• Issued, subscribed and paid-up capital in year 2009 was Rs.1.46 Billion.

Brief Introduction of the Organization

Business Volume

• Non Interest based income shows impressive increase of about 3.7 billion

Rupees.

• Administrative expenses increase by 25 % due to training facilities

development.

• Credit rating maintained at AAA by JCR Credit Rating Agency.

• It has assets of 350 Billion Rupees

• 5. It follows the International Accounting Principles , Islamic Accounting

Principles and regulations of Institute of Chartered Accountants of

Pakistan

SWOT AnalysisSTRENGTHS • Financial Strength

• High Percentage of Gross Profit

• Large number of Branches

• Govt. Support Image

• Huge Assets

• Large Number of Govt. Deposits

Opportunities• Sponsor the IT based Projects

• Good Will & Better Image

• Growth in the industrial sector

Weakness

• Less attention to rural development

• Poor Advertisement

• Poor Network

• Pirated Software

• 1 link ATM’s, No security

Threats• Retail Banking Overload

• Financing Cost of New Projects

• Focusing only on Govt. Deposits

• Ignoring Customers Needs

• Untrained Staff hurting the image

NBP ATM Fraud

• The National Bank of Pakistan (NBP) on Friday 14 March 2009 unilaterally

suspended its One-Link service with 14 other banks after finding out that a cyber

gang had withdrawn millions of rupees from its different branches through

automated-teller machines (ATMs) by cracking the PIN codes and hardware

security modules.

• The bank had also sought the help of the FIA to determine how the gang had been

misusing a couple of “zero-balance” accounts of two employees of another bank,

one of them retired, and getting complete command over the ATM system of the

NBP

• Police arrested Amir Abbas, an employee of the Lahore branch of the other

bank, one of the 14 banks sharing the ATM service with NBP.

• bank’s management had detected ‘cyber theft’ of over Rs3 million from its

ATMs in Multan and Lahore in recent weeks.

• But it was surprised to find similar cases unfolding in its branches

operating in the industrial belt of Punjab in Sialkot, Gujranwala and

Lahore.

• After following the transactions, the bank management found that the same

group had withdrawn another over Rs8 million from the NBP’s ATM in

Punjab just over the last weekend.

Recommendation & Conclusion

Conclusion• We do have Cyber crime law but

unfortunately its not implemented like other laws.

• Internet is not being widely used in country except large cities.

• Lack of awareness about the law.

• Only 10 % of cases are reported.

• Confusion about cyber crime & frauds.

Recommendations• Implementation of law should be

compulsory.

• Workshops & seminars to prevail awareness.

• Strong actions against criminals.

• Tight Security.

• Install Anti virus & anti spam softwares