The 2014 Verizon DBIR is available for download. This year’s report features nine common incident patterns, bringing together insights from fifty global organizations and more than 63,000 confirmed security incidents.

https://www.verizonenterprise.com/DBIR/2014/

“…we’ve created sections around common incident patterns derived directly from the data itself… Within each of those patterns, we cover the actors who cause them, the actions they use, assets they target, timelines in which all this took place, and give specific recommendations to thwart them. The drive for change is three-fold: first, we realized that the vast majority of incidents could be placed into one of nine patterns; second, we can (and did) draw a correlation between these incident patterns and industries; and third, we wanted to challenge ourselves to look at the data with a fresh perspective. The ultimate goal is to provide actionable information presented in a way that enables you to hash out […]

from The Herald

Savanna Tobacco says industrial espionage by its tobacco industry arch rivals is suffocating its potential and capacity to increase exports by a factor of at least 50 percent.
Executive chairman Mr Adam Molai said in an interview last week that customers were being haunted and their products confiscated in what could throw the victims out of business…

British American Tobacco Zimbabwe was recently caught in an intricate web of controversy over allegations of employing industrial espionage tactics against its competitors, Kingdom, Savanna Tobacco, Breco, Cutrag, Trednet and Chelsea although this has remained difficult to prove.

However, its handlers have hitherto courted similar controversy on the continent with media reports alleging this is the group’s modus operandi in other markets in Africa.

According to media reports in Nigeria, in April 2002 a legal team from South Africa’s Port Elizabeth obtained urgent court […]

Civil Georgia, Tbilisi / 6 May.’14 / 14:58

Prosecutor’s office said it has launched investigation into claims by Tbilisi-based Rustavi 2 TV channel that offices of its top executives were bugged.

Head of Rustavi 2 TV Nika Gvaramia claims he is under surveillance. (Interpressnews.)

Last September we reported (See London banks attacked) that Barclays and Santander banks in London had been attacked by criminals using remote KVM (keyboard/video/mouse) switch controllers.   The London Metropolitan Police just announced that the gang members involved have received their sentencing.

from met.police.uk:

Nine members of a gang which carried out a sophisticated cyber attack on the UK banking industry, stealing just over £1.25 million by remotely controlling bank accounts, have been sentenced to a total of 24 years and nine months imprisonment today, Thursday, 24 April.

The organised crime group also used bank and credit cards obtained from around one million intercepted or stolen letters to fraudulently purchase Rolex watches, designer jewellery and other high-value items, worth over £1 million.

Eavesdropping doesn’t need to be high tech. Employees, spouses, and family members have a duty to protect and safeguard confidential information.  

Two Men Caught Trading on Confidential Information Gained Through Eavesdropping

New York (HedgeCo.Net) –  A man is being charged with violating a duty of trust by trading during a blackout window after he overheard work calls made by his wife.

“Spouses and other family members may gain access to highly confidential information about public companies as part of their relationship of trust,” said Jina L. Choi, director of the SEC’s San Francisco Regional Office. “In those circumstances, family members have a duty to protect and safeguard that information, not to trade on it.”

Tyrone Hawk of Los Gatos, Calif., overheard his wife, a finance manager at multinational computer technology corporation Oracle Corp speaking of her company’s plan to acquire Acme Packet Inc. Hawk also had a conversation with his wife in which she informed him […]

Here is a link to an article by my friend and colleague Kevin Murray offering a some tips and an introduction to espionage countermeasures for building and facility managers. When the serious possibility of espionage arises, building managers and even security managers may not know where to turn for help.

[Read the full article at buildings.com]

Illegal wiretapping and eavesdropping can result in large law suits and penalties.  Corporations should not take such activity lightly. Even if it was not done by anyone in an official position- perhaps just a disgruntled employee, and even if no critical trade information was lost- perhaps just personal conversation, the resultant law suits could cost millions. Add to that the possibility that someone may really be trying to steal classified information, and you have very good reasons for scheduling professional sweeps of your facilities.

A few rogue employees at AT&T helped LA high profile  private investigator Anthony Pellicano (“P.I. to the Stars”) accomplish his wiretaps over 10 years ago. That activity has resulted in a class action lawsuit against AT&T.  They are now required to pay approximately $4,000 to each of the numerous victims, amounting to a total of almost $1.5 million.

from Hollywood Reporter:

AT&T will shell out […]