dicky wong senior inspector of police. mr. dicky... · 2017-06-30 · crime trend overall crime...
TRANSCRIPT
![Page 1: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/1.jpg)
Dicky Wong Senior Inspector of Police
![Page 2: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/2.jpg)
Agenda
• Introduction of Cyber Security and Technology Crime Bureau
• Our Approach
• Cyber Security Situation 2016 review
• Overall Technology Crime Trend
• Cyber Security Situation of HK
![Page 3: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/3.jpg)
Cyber Security Situation 2016 Review
![Page 4: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/4.jpg)
Crime Trend
Overall Crime Technology Crime
Year Loss (Million)
2011 148.5
2012 340.4
2013 916.9
2014 1,200.6
2015 1,828.9
2016 2,300.8
75000 70000 65000 60000 55000 50000 45000 40000 0
8000 7000 6000 5000 4000 3000 2000 1000 0
![Page 5: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/5.jpg)
0
1,000
2,000
3,000
4,000
5,000
6,000
7,000
2010 2011 2012 2013 2014 2015 2016
Cyber Security Incident in HK
980
Source: HKCERT
Cyber Security Situation of HK
810 1050
1593
3443
4928
6058
![Page 6: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/6.jpg)
Commissioner’s Operational Priorities 2012 - 2017
Current approach
![Page 7: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/7.jpg)
Priorities
Strategies
Current approach
![Page 8: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/8.jpg)
Engaging the Public
Cyber Security Summit
Cyber Security Professionals
Awards
![Page 9: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/9.jpg)
Cyber Security Situation of HK
Motives and Targets
Vandalism
Personal Fame
Financial Gain
Political
• Malware
• DDoS Attack
• Hacking
• Defacement
• Virus
• Individuals
• SMEs
• Government Bodies
• Large Corporations
• Critical Infrastructures
• Mobile Devices
• Internet of Things
• Advanced
Persistent Threat
• Ransomware
![Page 10: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/10.jpg)
Internet of Things or Internet of Threats?
![Page 11: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/11.jpg)
Cyber Attack targeting ICS
![Page 12: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/12.jpg)
Distributed Denial of Service (DDoS)
(Botnet / Zombie computers)
![Page 13: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/13.jpg)
Email Scam
Corporate Email Scam (867 no. of cases)
13
Victim company receives email(s) requesting for
outstanding payment to new bank account
Email address spoofed to be the same as /
resembling the genuine business partner
Victim deceived into making
payment
![Page 14: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/14.jpg)
Email Scam
Company A Company B
![Page 15: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/15.jpg)
CEO Email Scam
假CEO電郵騙案 騙款1000萬美元
警方在2015年接獲「CEO電郵騙案」,較2014年增加2.5倍,金額亦由2014年的3100萬急增至去年的2.21億。騙徒主要針對跨國大企業,入侵CEO電郵,仔細研究其電郵信件,了解公司生意,待適當時機以CEO的電郵發信予該公司的首席財務官,要求匯款至客戶戶口。
CEO Email Scam
CEO’s email account was hacked
Hacker purported to be the CEO
Requested the CFO to make a fund transfer
![Page 16: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/16.jpg)
Ransomware
Ransomware is a serious security threat that limits victims to access their files or system functions. It has “data-kidnapping” capabilities. Cybercriminals tend to threaten victims to pay ransom (bitcoin) in order to regain access to their files or systems.
![Page 17: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/17.jpg)
Ransomware
Cybercriminals
Email with malicious
attachment
Open the email and
execute the attachment
Bitcoin blackmail
![Page 18: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/18.jpg)
Ransomware
![Page 19: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/19.jpg)
Pay or Not?
![Page 20: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/20.jpg)
Suspicious Attachment
1. summary.exe, quotation.rar, invoice.zip, payment.js
2. summary.doc, quotation.xlsx, statement.ppt
Preventive Measures
![Page 21: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/21.jpg)
Disable Macros
Preventive Measures
![Page 22: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/22.jpg)
Mitigation
Unplug the power
Disconnect the infected terminal from network
Remove external storage devices from infected
terminal
Retain sample for analysis
![Page 23: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/23.jpg)
Offsite backup
Online backup
Regular Backup
Preventive Measures
![Page 24: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/24.jpg)
Management Solution
Access Control
Device Management
Awareness of Staff
Incident Response Mechanism
Preventive Measures
![Page 25: Dicky Wong Senior Inspector of Police. Mr. Dicky... · 2017-06-30 · Crime Trend Overall Crime Technology Crime Year Loss (Million) 2011 148.5 2012 340.4 2013 916.9 2014 1,200.6](https://reader033.vdocuments.mx/reader033/viewer/2022042312/5eda4048b3745412b571072d/html5/thumbnails/25.jpg)
Thank You