by Bob Burls @ Naked Security from Sophos

Do you know how to report a computer crime? Or even who you would report it
to?

So far, we've looked at unauthorised email account access and malware in our series of articles on how to report a computer crime. In this article, we'll look at an SQL injection attack.

We'll look at what offences are committed in different countries when a crime like this happens, how you should report the crime, and what evidence you can preserve.

Take this scenario:

A company has a web server and associated database configured to serve dynamic content. The company has set up its website insecurely, leaving it vulnerable to input validation attacks.

A cybercriminal has been hired by a competitor of the company to "take the company offline”. The cybercriminal has identified that the company website is susceptible to SQL injection, so performs a series of SQL injection attacks.

This results in the deletion of a number of tables from the database, rendering the company website inoperable.

by Bob Burls @ Naked Security from Sophos on October 31, 2012

Do you know how to report a computer crime? Or even who you would report it to?

Well, there is no one size fits all solution - it depends on the individual circumstances and where you are in the world - but we've drawn up some scenarios that are typical of some of the crimes that any computer user, at home or work, might come across.

In the first of our series of articles on how to report a computer crime, we'll look at unauthorised email access, what offences are committed when a crime like this happens and how you should report it.