Cyberextortionist

A cyberextortionist(s) is an individual or group who uses email as an offensive force. The group or individual usually sends a company a threatening email stating that they have received confidential information about their company and will exploit a security leak or launch an attack that will harm the company's network. The message sent through the email usually demands money in exchange for the prevention of the attack.^[1]

Cases

In November 2008, Express Scripts offered a reward of $1 million for information in regards to an anonymous email that had the names, social security numbers, birth dates, and prescription information of 75 members.^[2]

In March 2008, Anthony Digati was arrested on federal charges of extortion through interstate communication. Digati put $50,000 into a variable life insurance policy by New York Life Insurance Company and wanted a return of $198, 303.88. When the firm didn't comply, he threatened to send out 6 million spam emails. He registered a domain in February 2008 that contained New York Life's name in the URL to display false public statements about the company and increased his demand to $3 million.^[3] According to prosecutors, Digati's intent was not to inform or educate but he wanted to "damage the reputation of New York Life and cost the company millions of dollars in revenue,”.^[4] New York Life contacted the Federal Bureau of Investigation and Digati was apprehended.

On February 15, 2011, Spanish police apprehended a man who attempted to blackmail Nintendo over customer information he had stolen. The man stole personal information about 4,000 users and emailed Nintendo Ibérica, Nintendo's Spanish division, and accused the company of data negligence. He threatened the company that he would make the information public and complain to the Spanish Data Agency if his demands were not met. After Nintendo ignored his demands, he published some of the information on an Internet forum. Nintendo notified authorities and the man was arrested in Malaga. No information has been revealed as to what the man demanded from Nintendo.^[5]

References

1. ^ Vincent, D. (2007, September 19). Computer security ethics and privacy. Retrieved from http://www.webreference.com/internet/security/
2. ^ Kaplan, D. (2008, November 12). $1 million reward for arrest of cyberextortionists. Retrieved from http://www.scmagazineus.com/1-million-reward-for-arrest-of-cyberextortionists/article/120929/
3. ^ Pretty, P. (2010, April 22). Alleged cyber-extortionist indicted: feds say anthony digati tried to chill, defame business on internet to extract $200,000 in bizarre social-networking plot. Retrieved from http://www.patrickpretty.com/2010/04/22/alleged-cyber-extortionist-indicted-feds-say-anthony-digati-tried-to-chill-defame-business-on-internet-to-extract-200000-in-bizarre-social-networking-plot/
4. ^ Gendar, A. (2010, March 8). Anthony digati arrested for allegedly threatening new york life with email spam attack.. Retrieved from http://www.nydailynews.com/money/2010/03/08/2010-03-08_anthony_digati_arrested_for_allegedly_threatening_new_york_life_with_email_spam_.html
5. ^ Woollacott, E. (2011, February 15). Police arrest man over nintendo extortion. Retrieved from http://www.tgdaily.com/business-and-law-features/54123-police-arrest-man-over-nintendo-extortion