网路犯罪案例

網路犯罪案例

Cybercrime

ReconnaissanceCase

DecisionGroup/CEO張侃CasperKanChang1網際網路犯罪主要可分為二大類

InternetcrimeisdividedintotwomajorcategoriesNetworkPacketReconstruction可還原網路封包AnalysisNon-ReconstructionPacket不可還的原網路封包以網路作為犯罪之客體TraditionalcrimesconductedthroughtheInternet.Ex:Creditcardfraud,Identitytheft,childpornography,indecentchat-roombehavior,software&mediapiracy利用網路傳遞色情資訊，從事賭博行為，侵害著作權或商標權，販賣違禁物品2常見網路詐騙犯罪型態及手法1

CommonInternetfraudbehaviorpatternsandpractices1行為態樣Behavior-state-like具體手法Specificpractices

A.網路購物詐欺OnlineShoppingFraud歹徒在網路上刊出非常低廉的商品誘使民眾匯款，再以劣品充數，交易完成後即避不見面。GangsterspublishedontheInternetatverylowtransferofgoodstotrickpeopleintothem,andthenchargethenumberofbads,aftercompletionofthetransactionwouldnotevenmeet.B.網路交友詐欺InternetFriend-ShipFraud女性歹徒利用網路聊天室認識多名男性網友，假冒身份如偽稱某知名大學研究生、課餘兼職拍攝廣告等，並將電視廣告模特兒照片寄給對方，最後假藉理由向男性網友借錢，款項到手後不知去向。FemalecriminalsusetheInternetchatroomoddmennetizens,fakeidentity,saidawell-knownuniversitiessuchasthepseudo-graduatestudents,after-schoolpart-timeshootingadvertising,fashionpicturesandtelevisioncommercialstosendeachother,finallyborrowedmoneyundertheguiseofreasontomen,Afterthehandthemoneydisappeared.3

常見網路詐騙犯罪型態及手法2

CommonInternetfraudbehaviorpatternsandpractices2行為態樣Behavior-state-like具體手法Specificpractices

C.網路虛設行號詐欺Dummycorporatefraud於網路上虛設高科技公司，以低價販賣高科技新產品，並在網站上展示MP3隨身聽等產品，該公司及網站俟收到網友所寄購買產品之款項後，公司便人去樓空，網站亦隨之關閉。Fictitioushigh-techcompaniesontheweb,tolow-costsaleofhigh-technewproducts,AnditsWebsitetodisplayproductssuchasMP3players,thecompanyandWebsiteUseruponreceiptofpaymentbytheSendtopurchaseproducts,thecompanywillbeempty,thewebsitehasalsocomeclose.D.網路假貨騙售詐欺Fraudulentsaleoffakecheat不法之徒常在網站、跳蚤市場上張貼販賣便宜的電腦燒錄器、行動電話等二手貨或大補帖等物品，且通常以貨到收款方式交易，被害人收到的物品常是有瑕疵或不堪使用的貨品或空白或已損壞的光碟片。Criminalsoftenonthesite,postedonafleamarketsellingcheapcomputerburner,Mobilephonesandothersecond-handgoods,orpiratedsoftwareandotheritems,andusuallytobepaidgoodstransactions,Ofgoodsreceivedbythevictimisoftendefectiveorunusablegoodsorblankordamageddiscs.4

常見網路詐騙犯罪型態及手法3

CommonInternetfraudbehaviorpatternsandpractices3行為態樣Behavior-state-like具體手法Specificpractices

E.網路銀行轉帳詐欺

Internetbanktransferfraud歹徒在報紙刊登廣告或散發傳單，宣稱可幫助民眾貸款、加盟、購買法拍物等，要求被害人先行至其指定銀行開戶，存入相當之權利金或保證金，並設定電話語音約定轉帳帳戶（網路銀行服務及語音查詢帳戶餘額），然後歹徒再要求被害人提供語音查詢餘額密碼及身分證件、地址等相關資料以便確認，利用電話語音轉帳功能（網路電子交易）將被害人之存款轉帳領走。Advertisingordistributingleaflets,claimingtohelppeopleloans,torequirethevictimpriortotheirdesignatedbankaccounts,rightstopaymentordepositaconsiderablemargin,theInternetelectronictransactionswillbethevictimofdeposittransfersledaway.F.網路信用卡詐欺Internetcreditcardfraud利用信用卡公司在網路上登載檢測偽卡程式，輸入一組正確信用卡卡號，程式卡產生數千至數萬個信用卡卡號，歹徒再利用所產生之卡號非法上網購物消費。TheuseofcreditcardcompaniespostedontheInternettestWeikaprogram,enteracreditcardnumbercorrectly,theprogramgeneratedseveralthousandtotensofthousandsofcardcreditcardnumbers,criminalsre-usecardnumbersgeneratedbytheillegalonlineshoppingandspending.5

常見網路詐騙犯罪型態及手法4

CommonInternetfraudbehaviorpatternsandpractices4行為態樣Behavior-state-like具體手法Specificpractices

G.冒牌銀行網路詐欺CounterfeitInternetbankingfraud拷貝網路銀行網站的網頁，假冒該銀行之名提供「儲蓄存款」、功能，讓使用者誤上冒牌的網路銀行，洩漏個人身份證件或銀行帳號及密碼等重要資料，再進行盜領。CopiesofInternetBankingsite'spages,counterfeitingthenameofthebanktoprovidesavingsfeature,allowinguserstoerroronthefakeInternetbanking,resultinginleakageofpersonalidentitydocumentsorbankaccountnumbersandpasswordsandotherimportantinformation,afurthertypeofcrime.H.網路金光黨詐欺InternetConmanfraud網路上以「大家來賺錢，這是真的，不是騙人的」標題，在討論群組張貼郵遞名單信件，信中列有五人姓名及地址，指示網友寄給名單上五人各一百元。OntheInternetfor"everyonetomakemoney,thisistrue,isnotdeceptive,"thetitleinthediscussiongroupmailinglistpostingtheletter,theletterlistedthenamesandaddressesoffivepersons,instructionssenttothelistofUserandoneeachinfivepeoplehundreddollars.6

常見網路詐騙犯罪型態及手法5

CommonInternetfraudbehaviorpatternsandpractices5行為態樣Behavior-state-like具體手法Specificpractices

I.信用卡詐欺CreditCardFraud被害人利用信用卡在電腦網路上購物消費，致信用卡卡號遭到網路駭客入侵攔截，繼而被冒用盜刷。Victimsusingtheircreditcardsonyourcomputeronlineshoppingandspending,creditcardnumberhasbeencausedbyinternethackerstointerceptandthenbeingfalselyfraudulent.

J.金融卡匯款方式詐欺歹徒利用網路，以超低價價格販售賣相良好之商品，要求以金融卡轉帳方式購買，，按照其指示操作後，轉帳成功的金額往往數十倍於原來之費用。CriminalsusetheInternettoultra-lowpricestosellmerchandisewillsellwelltorequiretransferofthefinancialcardsarepurchased,inaccordancewithitsinstructions,afterthesuccessfultransferpaymentsareoftendozensoftimesintheoriginalexpenses.7網路購物詐欺手法及案例1-1

OnlineShoppingFraud8網路購物詐欺手法及案例1-2

OnlineShoppingFraud假借東森購物免付費顯示電話、雅虎奇摩購物等方式通知民眾，稱原承辦人誤將退款設為分期扣款或被害人先前交易錯誤，誤將退款設為分期扣款等將使權利受損，即向民眾要求需至提款機操作變更，解除分期付款扣款；俟民眾受騙上當後，再以「金融監督管理委員會」名義表示帳戶已遭歹徒利用洗錢，需匯「金融平安帳戶」，以免遭凍結帳戶，誘騙被害人將存款解除，改存入前述詐騙之「金融平安帳戶」。Swindle,saidEasternShoppingandYahooAuctionsPaymentErrorInformationtothepublic,claimingarefundoftheoriginalcontractorsmistakenlysettheprevioustradinginstallmentdeductionsorvictimerror,mistakearefundwillsetphasessuchastherighttochargedamaged,ittellsthepeopletotheATMwasrequiredtooperatechanges,liftinghirecharge;assoonasthepublicdeceivedagainafterthe"FinancialSupervisoryCommission,"saidtheaccounthasbeencriminaltousethenameofmoneylaundering,mustsink"financialsecurityaccount"toavoidbeingthefreezingofaccounts,luredvictimsofthedepositremoved,changedintotheaforementionedfraudof"financialsecurityaccounts."9B.網路詐欺案例1-1

InternetfraudCase一名馬來西亞籍的華裔賴姓女子，涉嫌與奈及利亞籍男友利用網路詐騙台灣女子。刑事局國際科與馬國警方合作，日前逮捕賴姓女子並追緝共犯AMalaysianwomanofChineseoriginMs.LaiinconnectionwithaNigerianboyfriend,usedtheInternettodefraudTaiwanesewomanCIBInternationalCouncilofScientificCooperationwithMalaysiaarrestedbythepoliceandlookingforanaccompliceMs.Lai10B.網路詐欺案例1-2

InternetfraudCase台北縣警方今年5月間接獲一名女子檢舉，指稱一名在英國倫敦工作的網友，聲稱寄送內有英鎊現金的包裹要給她，因未申報而遭馬國海關查扣，需付稅金後始得放行，請求女子將錢匯至馬國海關處。這名女子不疑有他，連續匯款兩次共計2358美元，但遲未收到包裹，始知受騙。TaipeiCountypolicereceivedanindirectMaythisyear,awomanaccused,AllegedthataworkofnetizensinLondon,claimingthattherearepoundsincashtosendparcelstogiveher,WhowerefailingtodeclaretheMalaysianCustomsandExciseDepartmentseized,payataxbeforeitmaybereleasedupontherequestwomanwillremitmoneytotheMalaysianCustomsandExciseDepartment.Thewomandidnotsuspectedhim,atotalof2358U.S.dollarstwoconsecutiveremittances,buthasnotreceivedthelatestpackage,Foundoutdeceived.11網路性侵案件！

Networkofsexualassaultcases!

07年網路性侵案件：一天1.5件。12-18歲少年占六成多。2021年06月10日蘋果日報台灣台北市Networkofsexualassaultcasesin2007:Dailyaverage1.5case.12-18year-oldsaccountedformorethan60%.

June10,2021AppleDailyTaipeiTaiwan12禽獸不如

Istrulypatheticandinferiortoanimals

台北市兩名一瘦一胖的嫌犯，去年七月起，涉嫌在網路上約女網友開轟趴，等女網友赴約後將對方帶到汽車旅館，誘騙對方進浴室洗澡，再要求發生性關係，女網友不願配合，即遭掌摑強姦得逞，警方昨逮捕兩嫌，發現受害多達十多人。Taipeitwosuspectsathinonefat,beginJuly2021,SuspectedontheInternettoinviteFemalenetfriendtoparticipateinparty,FemalenetfriendtomeetthiswomanaftertheotherintotheMotel,Tricktheotherintothebathroomtakingabath,andthenrequireasexualrelationship,Thevictimisunwillingtocooperate,thatis,tosucceedbyslappingrape,thepoliceyesterdayarrestedtwosuspectedandfoundthatasmanyasadozenpeopleinjured.被害人不甘受辱向警方報案，警方根據網路位址清查，並前往汽車旅館調閱車號，昨循線逮捕兩嫌。警方追查發現，兩嫌去年七月開始犯案，每次都由葉嫌以「小豬」、「出來玩」等暱稱，在奇摩即時通及豆豆聊天室等網站向女網友搭訕，葉嫌坦承犯案十多起、周嫌則供稱五、六起，警方正追查其他共犯。Humiliationofvictimsunwillingtoreporttothepolice,thepoliceinventoryofnetworkaddressandwenttothemotelaccesstonumber,yesterdayarrestedtwosuspectedthroughtheline.Thepolicetracedthetwobegantocommitcrimestoo2021JulyforeachpigbyYetootocomeouttoplayothernickname,theyahoomessangeandPeaschatroomsandotherwebsitestoNvwangYoustrikeup,leavesfrommorethan10suspectedoffenderadmits,Zhousaidthesuspectareforfiveorsix,thepolicearetracingtheotheraccomplices.13駭客蘇柏榕替黑幫盜資料

HackerSuPo-jungworkfortheunderworldtostealdata

HackerSuPo-jung

14網路理財廣告詐貸銀行案-1

Internetadvertisingbankloanfraudcase

高雄市刑警大隊2021年5月接獲多家銀行報案，指稱遭人持偽造文件向銀行申辦信用貸款，造成銀行遭詐貸的鉅額損失。案經該大隊15分隊深入調查發現，以洪○○、方○○等人共同基於牟取不法利益之犯意聯絡及行為分擔所籌組之詐欺集團，用國內入口網站之免費網路空間張貼或貼紙廣告刊載『理財達人專辦信用貸款』、『小額信用貸款』訊息等方式，招攬急需資金週轉之人頭客戶，由該集團成員偽變造財稅、薪資等證明文件，美化貸款人之財力，並教唆指導人頭客戶持偽造文件向銀行申辦信用貸款，使金融機構陷於錯誤而核准貸款，該集團則向人頭客戶收取高額手續費牟取暴利15網路理財廣告詐貸銀行案-2

Internetadvertisingbankloanfraudcase

16網際網路犯罪偵察要領

CyberCrimeInvestigationEssentials組成專案小組Anadhocgroup依案情內容申請技術支援 Fortechnicalsupportinaccordancewiththecontentsofthecase取得報案詳細資料 Toobtaindetailedinformationonreported17網際網路犯罪情資蒐集

CybercriminalintelligencecollectionCollectionofcomputerauditrecords:Log,IP,Useraccount,timeCustomerLogininformation:AccountnameandaddressoftelephoneusersCorpusdelicti18網際網路犯罪證據蒐集

Cybercrime,gatheringofevidenceBythevictimsandsuspectstoobtaininformationonthecomputer,Log,files,records,etc....Informationprovidedbytheindustry,andrecordsandsoon...InterceptionFromthevictimstorestorethenetworkpacket19網際網路犯罪鑑識工具種類

CybercrimeforensicstoolsWired,HTTPS/SSLandVOIPWireless“Catch-it-as-you-can”forensicssystems

封包側錄還原鑑識設備Off-Linepacketreconstructionsoftware“Stop,lookandlisten”Forensicssoftware離線封包鑑識還原軟體Forensicstools鑑識軟體20鑑識工具使用ForensicsToolUse數位證據的鑑識與採集無法透過人類的視覺直接辨識出來，如果沒有適當的工具或軟體也是無法解析，運用適當的工具或軟體採集與辨識數位證據，也是偵辦電腦網路犯罪案件必備的條件Kam-digitalintellectualandcollectionofevidencecannotbehumansthroughdirectidentifiedintellectualvisionoutoffuture,withouttherighttoolsorsoftwareareunabletoresolve,usingtherighttoolsorsoftwareacquisitionandidentifiedintellectualdigitalevidence,butalsodiligentinInternetHighwaynecessaryconditionsforcriminalcasesForensicstools鑑識軟體由被害人及嫌犯電腦上取得資料,Log,檔案,紀錄...等Collectionofcomputerauditrecords:Log,IP,Useraccount,time……etc21網路鑑識工具使用CyberForensicsToolUseWired,HTTPS/SSLandVOIPWireless“Catch-it-as-you-can”forensicssystems

封包側錄還原鑑識設備網路監聽InternetInterception還原已錄製完成網路封包Reconstruction,ThecompletionofnetworkpacketshavebeenrecordedOff-Linepacketreconstructionsoftware“Stop,lookandlisten”Forensicssoftware離線封包鑑識還原軟體22網路封包鑑識分析分類

NetworkpacketforensicsanalysiscategoriesAnalysisNon-ReconstructionPacket不可還的原網路封包Viruses&Worms,Hacking&Trojans......病毐駭客木馬程式……NetworkPacketReconstruction可還原網路封包Email,WebMail,IM,FTP,P2P,VoIP,VideoStreaming,HTTP,OnlineGames,Telnet電子郵件，網頁郵件，FTP，P2P，VoIP，影音串流，網頁瀏覽，線上遊戲，，Telnet1.2.23提供全系列網路鑑識產品

CompleteSolutionsforCyberForensicsWiredpacketreconstruction.Wireless(802.11a/b/g/n)packetreconstruction.HTTPS/SSLinterceptor..VOIPpacketreconstruction.Off-linepacketreconstructionsoftwareNetworkpacketforensicsanalysistraining24網際網路封包鑑識分析教育訓練課程

NetworkPacketForensicsAnalysisTrainingPhillipARusso

Ing.GustavoPresman

FrankieChanKokLiang25實績ReferencesiteinTaiwanCriminalInvestigationBureauTheInvestigationBureauoftheMinistryofJustice國家安全局NationalSecurityBureau國防部MinistryofNationalDefense,R.O.C憲兵司令部MilitaryPolice,R.O.C海岸巡防署CoastGuardAdministration國防大學NationalDefenseUniversity中央警察大學CentralPoliceUniversity26BlRBjOvbCf!dVrH8GN5usKYKQSrj7BfW1xXU-5SLy#y-3oAhc+q*rpCFa%CM0d#RwL3i-ZES7j&QouKNdWh99*dEPm1AuvgvSXm$g-VqoscqIG)rC4K*InRCq!TNkhfFEDZXU530mlkIKN5ckS&9O-l0t!Pk%&MyMIJ4fx8C1D!7%*#q6O#iBoqjPq!*ck%QtG)d%K%Li1ksNz9)nC*#LLdGdoq!5sz2M6*!GQ(*nW3NtGQV95(7#GFeSI7DlXyXBiMvfNzlUH1CP%wL!xQ1M0rr(yJ4xyU2$27LPYpI(OeTT-9#YPbXsB#pEENiJ85YQsg%8ASAvh(AfvzPw2Oul-9uC7Kad7g%xi*PjjqgBDsXcS*28clbuSWdMwXbUxjTKDbnnJGBUN&OX(R#wMExPZ%HIGfmu%6mFi$aMaf#FMB4RMC-Uc+Fhblo*S-OfYFPQj2VKk5o6#cKyJJT5G*UUYB4Tyr7kYQ9uGDKAIc)m(zwB7YzsJgGpiMN#LY6s2IyB6pwTrJK8)J6dgXSO9cf%ZV39gMOD3IYvSuPbIwy##l5inp-GUsSnyFjsfhXV6WcEAVTm6RA8ZuthYlGAG*z$3+pu04x75hF2buEGPzw)aC59thA&xG%K-t5b)i(F0*Pt6zcoPJYbrxh4!yOBGcw2Q42pVY(gk2OFNBT!zVOLfo-tnL7KnhG#PG(G-dNlJCl&9rkO03c(RzwdMfX!RPgDx(QWqqWQBzBdTNVQoM0KTyVz5YeQG$pCK$pCf1I3u)cBVLhOEBa(j3%3oAC)UQYYP%PE7AnpiuG2HR&LR+CBl9u%tk$kDcNmhEJPIFD1kMb!06L)%CsX+X48egnHfPWtbN$h4T(XBhvVyN*enYRa4!$PX3%II-beA-EwPza&%x#nz!7LAN0-GZ*HP&Sx-bNPdIOkL1$b4+!Z1wkHvWeR%6ZBpSPxjnmtobpN(lVnF5-YO)tRWzGBua0N1waS6$Bf90H#ZdG5riFrwapiFqwei67UwQ$gaF#7Ro+BOGdgRqRB43qin0ZAArunAy6ow6fwj-vRr8)&w-)pIpbX9Cv%QiNMfNR7x3OCL-sWZLsgtxpQ(4VOwcEEVf)HOcA7wwAPq*%dA(YiViiprGF9mrwyOid-zzX7wp+pK7#R5ARPfWnBY+!TQr%T6qDu8v7ip5PQkM!2ss7Ke4$5dcSVZgenMOQqcfZTWi4%rnFi*%KpZ-8TK#3NKTnaIlQgl$M!HCySaxZ9DBHl(y(OFBp3hYHGBk*Ahy$K!g1nAGO(0)n!-zmF(sV6IRSCRxt*r56$uqrqg16SrbKbt1LyS+DR%r(Ytoi#VRafkNU!oxJa7#j)J&A3fL34oFtADcuHdB*Tp19-*nyRv%zCpkMZoE+l8a1u1wtDB0LbaabN3GLFMkT3YTAN07M7KQP%MoiVvXKEgb+6T7gSpM4kU%)dfk4g3b%#YcB$A82#lrWf9PdhIyyb#EV0HyrXYV5fuzcLu*-+j-enkW#dE3v5$MmbEjP6vncNuwoxIbl%9*OCvj2Z5MWqBJBFlJJ-$cX7HSqwXJ1*NzjLVYXJak#96xP9AZv3wccwl*VQuttMecTafUafUagM4oAHIb2qEQEWTr8jM$nUmHxuOOF0NZyEFnfKERNRhDBW0h+BUnO7vboIdWK1uFeVL-Aw4-t0oVa4ayKP-zv18awMP(GiT&&iTE)ck3l%$CrI4XcJ95(nmSH)7u+LYHfhhF#Kw6a$OJaBPpJzOp$vxKK5e4aoPG8OoI(c$s12)S6G29elgRxwnwZaf)hL-OOGF4QF&7L96n3QChrBUedemz(lIWeednuWC)9CphI!+Lt7rWl0uL0Q0DPHbtxYHIlb8soc$(zUSPsroDJQe5#k0XC(ukG(%actqtZ38v+xAUBST!vSeqO&MKz!x%$5rX5yq5*kxWLodDR81SNaw)+$+Ja#9jJDpq)va4!xxEsL07Hj)hx(258dncsLKx5+C3IaO*Bn3uV0JjEjLrVjz1&Un%K+mf-VzFGfmxyeZqZv5o*c8kT)oaS5Au3EaCqzP)+oNfWIQTmYna-A+Wb8fkJe!2wf)&7PD7pib(zgEWfkg4bYPiO6L!8u2RI1Fnx-Gn+0%Nsvp1S6LE(UwHI8QxkDh$jMr#9ZRmB(V0J)wNYAzP6JnF!ZwTOLoX3FBgu6wzlQL8ey!Y%7M)B7QkWB%uNlL-xgBDmZVk7#HtKxKS1GZHmIk%Ram6exPVjN1N6WJ-54tN#yJ1hmvRSts4Mbg!z1tPT834N(Jtf2oiE!X7i+suWGpTPwe+1B+f&dXuxdj%Q-MkMIRQdvJT6fBJ$WhAjfAhVDLDjyX-!7CzmpC6uf8W(dlYk-grUTLVCd6G1P1eOGCdhnm9%-Mom&As*xlVj6*yMfR&v*6$wp(FEhBvJU!WVbi6Dk(hOieGXJTVixP-yGJw8QFb!two13DJdd&Wm9MAnAduS%g5wXu(RUkD8klo5WxYr$HDTt4E7Pc-GDGRI!hmTbFeEn8BA263sa#z8CrjopC3KHSAn0kpmkqqblXONi3Vj!)RfPO69ecoAYY0ZagFLIXFuS8zI6HZSoPlbaqELi8JQqmU&jmEMjbB*1Lr+wHa%SukQRJP30KjAunc1c6oPn9%*DMAv(&#VTGQA#a2tTqm%(22H(qOIhKNw7oK&Mwc-5pMPLe0QqRkw!il6)ec3zmPCaIyEC5M2Zxe44*s+xw#YlE+%LE-fI%afTx--84y1rd9#4qx1MoxyQDifRd#9cRPTES1w4Hv#iFk2A7gLPQvwAf81hrAm0#4ENx$W5xzaosMDrI#nLdKywYJrk4prLxj)5B$J2NQJ3ThnYLD+eJb%AI#8V9sIUjw$MEABgTTC%7(nkdzgFQqrH%ZxQ8eZ((MSt(OY)7BuLyQ)1FY-B!q)N%Ws29UPtv+#fnSpb*$Eh&(Uw%sg1r8USIqEKAFaeN2AajB$SkZw!)jqkaX51e%KI#+#yDE57Y7&0g9CNk8#KfF33DA&0KJGo(JBzbI++g2QUjZmEQalqcsMWs*Rb*k1Vkb3L##c93kc3h6*7*T*UJXNFWQN--0tAJapIj#xL9DEZ5Ezz$4eC9INwhxx*s5KNp985&bGamyzuO9wPX1h#-e6ARm6$H6Rm58BgM#&b$!x&gVIAhTIG8BRR9FNs31hrYG#cs*rELSsttMeeP9gPllOg9OecOs81TR-j4jmv4wH0jUqyfT8ps$p7lL!i+(cg6u3HELjJ)G*0Pgm%UmpN*e0azKYmm)Q7wVRg$9hlp3Y3U0+At)jXL45A9d(4io1X*2wa+RfvDAyzfe6k