Long before it was acknowledged to be a significant criminal and national security threat, the FBI established a forward-looking organization to proactively address the issue of cyber crime.
Since its creation in 1997, the National Cyber Forensics and Training Alliance (NCFTA), based in Pittsburgh, has become an international model for bringing together law enforcement, private industry, and academia to share information to stop emerging cyber threats and mitigate existing ones.
Special Agent Eric Strom, who heads the FBI unit — the Cyber Initiative and Resource Fusion Unit (CIRFU) — assigned to the NCFTA said:
The exchange of strategic and threat intelligence is really the bread and butter of the NCFTA … The success of this effort at every level comes down to the free flow of information among our partners.
When the nonprofit NCFTA was established, the biggest threat to industry was from spam — those annoying unsolicited e-mails that fill up inboxes. Today, the organization deals with malicious computer viruses, stock manipulation schemes, telecommunication scams, and other financial frauds perpetrated by organized crime groups who cause billions of dollars in losses to companies and consumers.
The NCFTA essentially works as an early-warning system. If investigators for a major banking institution, for example, notice a new kind of malware attacking their network, they immediately pass that information to other NCFTA members.
Alliance members — many have staff permanently located at the NCFTA — then develop strategies to mitigate the threat. FBI agents and analysts from CIRFU, also located at NCFTA headquarters, use that information to open or further existing FBI investigations, often in concert with law enforcement partners around the world.
Strom said
The organization draws its intelligence from hundreds of private-sector members, Carnegie Mellon University’s Computer Emergency Response Team (CERT), and the FBI’s Internet Crime Complaint Center (IC3). That extensive knowledge base has helped CIRFU play a key role in some of the FBI’s most significant cyber cases in the past several years. (See sidebar below.)
Training is another important role of the NCFTA. Last year, an international internship program was held in which cyber investigators from Germany, Great Britain, Australia, the Netherlands, Lithuania, and the Ukraine came to the alliance headquarters for 90 days to share knowledge, build relationships, and help with each others’ investigations.
Mirko Manske, a cyber investigator for the German Federal Criminal Police said
Manske added,
When it comes to the global reach of cyber crime, Manske said,
Sidebar : Cyber Takedowns
The FBI has conducted a number of major cyber takedowns with the help of the Cyber Initiative and Resource Fusion Unit (CIRFU) — the cyber unit attached to the NCFTA. Here is a brief look at a three of those cases:
Dark Market: Fifty-six individuals were arrested worldwide and $70 million in potential loss was prevented. A CIRFU undercover agent posing as a cyber crook infiltrated a criminal Internet forum at its highest level. More
Coreflood: Investigators disrupted an international cyber fraud operation by seizing the servers that had infected as many as two million computers with malicious software. More
Trident Breach: This major bust targeted a theft ring that used a Trojan horse virus to steal millions of dollars from victims’ bank accounts. More
Resources: 
NCFTA website : www.ncfta.net Cyber crime Internet Crime Complaint Center (IC3)
Contact the FBI
Scams & Safety
FBI on Facebook
Freedom of Information Act U.S. Department of Justice
Follow the InfoManager’s previous Safenetting Alerts
Thanks for reading!
You can also keep up with the efforts to curb spam and cybercrime by reading the news at Knujon and HostExploit.com. And, you should switch to SpamCop and take a stand against spam.
