Cybercrime And Its Impact In Bangladesh 30172i
This document was ed by and they confirmed that they have the permission to share it. If you are author or own the copyright of this book, please report to us by using this report form. Report 3l3c15
Overview 3z723u
& View Cybercrime And Its Impact In Bangladesh as PDF for free.
More details 2i4a6q
- Words: 7,107
- Pages: 26
Cybercrime and Its Impact in Bangladesh Title Fly
Cybercrime and Its Impact in Bangladesh Title Page
Prepared for: Prof. M. Z. Manum Course Instructor: Business Communication MBA Program
Prepared by: Md. Tanvir Hasan ID. 091051019 Md. Azizul Haque ID. 091052005 Taranna Ansar ID. 091051029 Naznin Akther Runa ID. 091051034 Belal Hossain ID. 091052007
ULAB, Dhaka May 10, 2009 ii
Preface Cyber and technology related crime is on the increase and current trends indicate that it will be a significant issue in Bangladesh. It has already been seen that a glomming threat becomes visible in the arena of information technology. Recently the hacking of RAB website and e-mail threats of former prime minister are example for few of them. In contrast, cybercrime is becoming a threat to government itself. Due to lack of necessary legislation to tackle such type of crime, cyber criminals are almost in the safe side to commit such crime. In the Information and Communication Technology Act. 2006, there are several clauses against cybercrime. But this Information and Communication Technology act is not the concert one. By enacting this act, there is a chance to become safe side after committing crimes. So, considering these facts a comprehensive Cybercrime Protection Act should be imposed. This report incorporates the impacts of cybercrime in Bangladesh especially focuses on the area of Personal life, Workplace as well as Policy making Bodies or thinkers. We believe the report would help all relevant concerns and especially policy makers.
iii
Abbreviation and Acronyms AFP BP BTTB CID ICT IOP IRC TEDS
Australian Federal Police Bangladesh Police Bangladesh Telegraph and Telephone Board Criminal Investigations Department Information and Communication Technology Investigations, Operations and Prosecutions Internet Relay Chat Training and Executive Development Specialist
iv
Table of Contents Chapters
1.0
2.0
3.0
4.0
Description
Page No.
Title Fly Title Page Preface Abbreviation and Acronyms Executive Summary INTRODUCTION 1.1 Background 1.2 Problems 1.3 Objectives 1.4 Scopes and Limitation 1.5 Hypothesis 1.7 Rationale METHODOLOGY 2.1 Study Area 2.2 Target Audiences 2.3 Data Collection Method TYPES OF CYBERCRIME WITH THE PROFILE OF CYBER CRIMINALS AND VICTIMS AND REASONS 3.1 Types of Cybercrime 3.1.1 Hacking 3.1.2 Virus Dissemination 3.1.3 Software Piracy 3.1.4 Pornography 3.1.5 Credit Card Fraud 3.2 Reasons of cybercrime 3.2.1 Capacity to store data in comparatively small space 3.2.2 Easy to access 3.2.3 Complex 3.2.4 Negligence 3.2.5 Loss of evidence 3.3 Profile of Cyber Criminals 3.3.1 Children and adolescents 3.3.2 Organized hackers 3.3.3 Professional hackers / crackers 3.3.4 Discontented employees 3.4 Victims of Cybercrime IMPACT OF CYBERCRIME AGAINST INDIVIDUALS 4.1 Impacts against individuals v
i ii iii iv vii 1 1 1 2 2 2 3 4 4 4 4 5 5 5 5 5 5 5 6 6 6 6 6 6 6 7 7 7 7 7 8 8
Chapters
5.0
6.0
7.0
8.0 9.0
Description
Page No.
4.1.1 Harassment via e-mails 4.1.2 Cyber-stalking 4.1.3 Pornography 4.1.4 Defamation 4.1.5 E- mail spoofing 4.1.6 Fraud & Cheating 4.2 Impacts against individuals property 4.2.1 Computer vandalism 4.2.2 Transmitting virus/worms 4.2.2.1 Logic bombs 4.2.2.2 Trojan attacks 4.2.3 Web jacking 4.2.4 Internet time thefts 4.2.5 Intellectual Property crimes IMPACT OF CYBERCRIME AGAINST ORGANIZATIONS 5.1 Unauthorized control/access over computer system 5.2 Possession of unauthorized information 5.3 Software Pirate and Copyright 5.4 Financial Institutions are at risk IMPACT OF CYBERCRIME AGAINST THE GOVERNMENT 6.1 Cyber terrorism against the government organization 6.2 Trafficking NECESSARY LEGISLATIONS IN BANGLADESH TO TACKLE CYBERCRIME 7.1 Cyber Tribunal 7.2 Cyber Appellate Tribunal CONCLUSION RECOMMENDATIONS NOTES Appendix 1 Target Audience Covered References Bibliography
vi
8 8 8 8 9 9 9 9 9 10 10 10 10 10 11 11 11 11 11 12 12 12 13 13 14 15 16 17 18 19 20
Executive Summary 1. Introduction Cybercrime has already become a going concern in both private as well as public sector in Bangladesh. During the last decade private and public sector has done a revolution with the use of technical enhancement. Due to unauthorized intervention to the system, company loses huge confidential information which caused a large amount of financial lose. It has already been identified that especially Financial Institutions are in the most threading organization for cybercrime that at the same time reflects to the personal life. Some development partners has started working how to tackle cybercrime and improve effective communications.
2. Methodology Employing the following qualitative methods has collected the relevant information: •
Literature Review (secondary source of information; journals, reports etc.)
•
In-depth interviews were made with the Manager and others of Cybercafé.
•
Focus Group Discussion with the students of private university.
•
Key Informant Interview with the Member of Cybercrime unit.
3. Types of Cybercrime Cyber crime is the latest and perhaps the most complicated problem in the cyber world. “Cyber crime may be said to be those species, of which, genus is the conventional crime, and where either the computer is an object or subject of the conduct constituting crime”. “Any criminal activity that uses a computer either as an instrumentality, target or a means for perpetuating further crimes comes within the ambit of cyber crime.
4. Impact of Cybercrime against Individuals Cyber crimes committed against people include various crimes like transmission of childpornography and harassment through e-mail. The trafficking, distribution, posting, and dissemination of obscene material including pornography constitute one of the most important cyber crimes known today. Cyber harassment is a distinct cyber crime. Harassment can be sexual, racial, religious, or other. This also brings us to another related area--violation of citizen which is a crime of grave nature.
5. Impact of Cybercrime against O rganizations This activity is commonly referred to as hacking. The Indian law has however given a different connotation to the term hacking, so we will not use the term "unauthorized access" interchangeably with the term "hacking" to prevent confusion as the term used in the Act of 2000 is much wider than hacking. vii
Bangladesh's financial institutions are at risk from hackers. In the country financial institutions have introduced various online features like online banking, stock exchange transactions but are not able to provide the highest security. Source said the cyber criminal networks through Internet have attacked our country's technology infrastructure. Recently, hackers interrupted the DSE transaction, which cost the small entrepreneurs dearly.
6. Impact of Cybercrime against the G overnment Cyber terrorism is one distinct kind of crime in this category. The growth of internet has shown that the medium of Cyberspace is being used by individuals and groups to threaten the international governments as also to terrorize the citizens of a country. Cyber terrorism may be defined to be “ the premeditated use of disruptive activities, or the threat thereof, in cyber space, with the intention to further social, ideological, religious, political or similar objectives, or to intimidate any person in furtherance of such objectives”.
7. Necessary Legislations in Bangladesh Cyber crime can involve criminal activities that are traditional in nature, such as theft, fraud, forgery, defamation and mischief, all of which are subject to penal laws of a country. The abuse of computers has also given birth to a gamut of new age crimes that are addressed by the special laws enacted to penalize these crimes. For example, in Bangladesh Tatha O Jogajog Projukty Ain 2006 (Information and Communication Technology Act, 2006) defines certain offences which does not cover by the Penal Code. And so it can be said that the Penal Code, 1860 is not effective enough in dealing with cybercrime.
7. Conclusion Capacity of human mind is unfathomable. It is not possible to eliminate cybercrime from the cyberspace. It is quite possible to check them. History is the witness that no legislation has succeeded in totally eliminating crime from the globe. The only possible step is to make people aware of their rights and duties and further making the application of the laws more stringent to check crime. Undoubtedly the Act is a historical step in the cyber world. Further it cannot be denied that there is a need to bring changes in the Information Technology Act to make it more effective to combat cybercrime. It can be concluded with a word of caution for the pro-legislation school that it should be kept in mind that the provisions of the cyber law are not made so stringent that it may retard the growth of the industry and prove to be counter-productive.
8. Recommendations •
Clear and self-explanatory Standard Operating Procedure to be imposed immediately for the Cybercrime Unit;
•
A comprehensive induction program should be developed for all the concerns of ICT and implement it as pilot basis;
•
A separate Cybercrime Protection Act should be enacted. viii
1
Section A: Introduction and Methodology 1.0
INTRODUCTION
This report is the outcome of the study on Cybercrime and Its Impact in Bangladesh. Commissioned by the Course Instructor of the Business Communication Prof. M. Z. Mamun, this study has been conducted in May 2009. The information generated by means of the study is cross-cutting across various chapters presented in the report. Therefore, it may appear that there is a lot of duplication of information. This has been done knowingly as it is essential because the target audiences of the study and the issues addressed are very much related with each other.
1.1
Background
In the words attributed to the Greek Philosopher, Heraclitus, there is nothing permanent but change. These words, written almost 2500 years ago, are very true today: we are living in a constantly changing world. The most rapid pace of change that we see is in the world of computer or the information and communication technology. Over the last fifteen years, the increase in technology and the use of computer, in both the personal and business sector has increased remarkably. This technology advance has ensured that the twenty first century is the information age. With all the possibilities that the new technology offers for progress and development, the same technology can be used for malicious and criminal purposes. A couple of years ago, fishing spelled with “F” was a pleasant activity with a fishing rod or a net where you could land yourself a nice meal for you and your family. Today, phishing, spelled with “PH” is an activity with a fake website or email where one can land credit card or bank details. We are extremely dependent on the cyber1 world for both our professional and personal work. With this growing dependency on information and communication technologies (ICT), there has emerged new threats to network and information security. There is an ever-growing vulnerability to cybercrime in today’s world. This is also true for Bangladesh where the number of internet s is growing rapidly and where ICT is important for the economy.
1.2
Problems
Cybercrime generally refers to criminal activity where a computer or network is the source, tool, target, or place of a crime. These categories are not exclusive and many activities can be characterized as falling in one or more. Although the term cybercrime is more properly restricted to describing criminal activity in which the computer or network is a necessary part of the crime, this term is also sometimes used to include traditional crimes, such as fraud, theft, blackmail etc., in which computer or networks are used. As the use of computers has grown, cybercrime has become more important. Cybercrime, as a transnational crime, is a global issue with a global impact. Increased sophistication of cybercrime attacks and vulnerability of information available online is a serious concern for institutions, law enforcement agencies and other stakeholders.
2 Victims of these attacks are not just private citizens or organizations with limited resources available to protect themselves but very large companies.
1.3
Objectives
The overall purpose of the study was to identify the impact of cybercrime in Bangladesh with regard to technological enhancement. The study has embarked upon the specific objectives are to assess: •
Types of cybercrime with the profile of cyber criminals and victims;
•
Impact of cybercrime against individuals;
•
Impact of cybercrime against organizations;
•
Impact of cybercrime against the Government;
•
Necessary Legislations in Bangladesh to tackle Cybercrime.
1.4
Scopes and Limitation
Cybercrime does not know the border. The same technology that brings people of the world closer together has a darker side, making it easier for criminal or malicious elements to steal, destroy, corrupt, defraud and exploit. They do not have to be near they can do so from another country or continent. Internet technology has come to Bangladesh quite late. But, the country does not leg behind when it comes to cybercrimes. As most of the organizations in Bangladesh are very keen to use the opportunity of the internet technology, the potential threats can not be ruled out. Due to availability and comparatively cheaper prize of a personal computer, interest to use them for day to day personal business is being grown up. Considering the above views, the study was conducted at all levels (corporate and/or personal) in where ICT has arrived with its prospect. The study has suffered certain limitations as below:
1.5
•
The duration of the study was very short. More in-depth investigation would have resulted better outputs;
•
Lack of resources has hampered the study to some extent;
•
Access to information is very difficult. In most cases, concerned persons were very rigid to share adequate information.
Hypothesis
Technology is used by both Crooks and Cops! Cybercrimes such as online hacking, software piracy, virus dissemination, child pornography, credit card fraud etc. represent new crime methods, and continue to grow at an alarming rate. These create new and severe problems that are very complex to tackle. Organizations are being cheated with a lot of money as well as information. At the same time, they are engaging huge resources to hinder it.
3
1.6
Rationale
Cybercrime has already become a going concern in both private as well as public sector in Bangladesh. During the last decade private and public sector has done a revolution with the use of technical enhancement. Due to unauthorized intervention to the system, company loses huge confidential information which caused a large amount of financial lose. It has already been identified that especially Financial Institutions are in the most threading organization for cybercrime that at the same time reflects to the personal life. Some development partners has started working how to tackle cybercrime and improve effective communications. In the view above, it can be assumed that this report in general will be helpful for all concerned. In particular, development partners will be able to identify the how it affects in every arena of our country. Persons will be able to become aware having idea how it impacts to human life. Finally, policy makers will be having a clear idea on the impacts of cybercrime to all arenas that will enable to prepare and implement a comprehensive strategy or action plan.
4
2.0
METHODOLOGY
By design, this is an exploratory type of qualitative study attempts to unearth the in-depth of cybercrime in Bangladesh.
2.1
Study Area
The study has been carried out in all sectors where technological intervention has already become as essential. The below table shows the organizations covered within the purview of the study: Sl. Details Cybercafé 2 i. HotSpot Cybercafé in Mirpur ii. Blue Planet.Com in Dhanmondi iii. Global Windows in Uttara Banks iv. Dhaka Bank Private University v. Eastern University vi. University of Asia Pacific Government Agencies vii. Cybercrime Unit at CID, BP
2.2
Target Audiences
In order to collect relevant information for the study following target audiences were brought within purview of the study (Appendix 1): •
Manager of Cybercafé
•
Technical Experts of Cybercafé
•
Automatic Trailer Machine in Bank
•
Students of Computer Science of different universities
•
of Cybercrime Unit at CID, Bangladesh Police
•
of general public
2.3
Data Collection Method
Employing the following qualitative methods has collected the relevant information: •
Literature Review (secondary source of information; journals, reports etc.)
•
In-depth interviews were made with the Manager and others of Cybercafé.
•
Focus Group Discussion with the students of private university.
•
Key Informant Interview with the Member of Cybercrime unit.
5
Section B: Details Findings 3.0
TYPES OF CYBERCRIME WITH THE PROFILE OF CYBER CRIMINALS AND VICT IMS AND REASONS
Cyber crime is the latest and perhaps the most complicated problem in the cyber world. “Cyber crime may be said to be those species, of which, genus is the conventional crime, and where either the computer is an object or subject of the conduct constituting crime”. “Any criminal activity that uses a computer either as an instrumentality, target or a means for perpetuating further crimes comes within the ambit of cyber crime.
3.1
Types of Cybercrime
All crimes performed by abuse of electronic media or otherwise, with the purpose of influencing the functioning of computer or computer system. The followings are the top listed types of cybercrime: 3.1.1
Hacking
Hacking is a simple term means illegal intrusion into a computer system without the permission of the computer owner/. Hackers usually do that with the intention of obtaining confidential information. 3.1.2
Virus Dissemination
Virus itself is software that attacks other software. It may cause for data loss, deduction of bandwidth speed, hardware damage etc. Trojan Horse, Time Bomb, Logic Bomb, Rabbit are the malicious software. 3.1.3
Software Piracy
Theft of software through the illegal coping of genuine programs or distribution of products intended to for the original. 3.1.4
Pornography
Pornography is the first consistently successful e-commerce product (Official website of the Cybercrime Investigation Cell, Crime Branch, CID, Mumbai). Deceptive marketing tactics and mouse trapping technologies pornography encourage customers to access their website. Anybody including children can log on to the internet and access website with pornographic contents with a click of a mouse. 3.1.5
Credit Card Fraud
You simply have to type credit card number into www page of the vendor for online transaction. If electronic transactions are not secured the credit card numbers can be stolen by the hackers who can misuse this card by impersonating the credit card owner.
6
3.2
Reasons of cybercrime
Hart in his work “The Concept of Law” has said ‘human beings are vulnerable so rule of law is required to protect them’. Applying this to the cyberspace we may say that computers are vulnerable so rule of law is required to protect and safeguard them against cyber crime. The reasons for the vulnerability of computers may be said to be: 3.2.1
Capacity to store data in comparatively small space
The computer has unique characteristic of storing data in a very small space. This affords to remove or derive information either through physical or virtual medium makes it much easier. 3.2.2
Easy to access
The problem encountered in guarding a computer system from unauthorized access is that there is every possibility of breach not due to human error but due to the complex technology. By secretly implanted logic bomb, key loggers that can steal access codes, advanced voice recorders; retina imagers etc. that can fool biometric systems and by firewalls can be utilized to get past many a security system. 3.2.3
Complex
The computers work on operating systems and these operating systems in turn are composed of millions of codes. Human mind is fallible and it is not possible that there might not be a lapse at any stage. The cyber criminals take advantage of these lacunas and penetrate into the computer system. 3.2.4
Negligence
Negligence is very closely connected with human conduct. It is therefore very probable that while protecting the computer system there might be any negligence, which in turn provides a cyber criminal to gain access and control over the computer system. 3.2.5
Loss of evidence
Loss of evidence is a very common & obvious problem as all the data are routinely destroyed. Further collection of data outside the territorial extent also paralyses this system of crime investigation.
3.3
Profile of Cyber C riminals
The cyber criminals constitute of various groups/ category. This division may be justified on the basis of the object that they have in their mind. The following are the category of cyber criminals-
7 3.3.1
Children and adolescents between the age group of 6 – 18 years
The simple reason for this type of delinquent behaviour pattern in children is seen mostly due to the inquisitiveness to know and explore the things. Other cognate reason may be to prove themselves to be outstanding amongst other children in their group. Further the reasons may be psychological even. E.g. the Bal Bharati (Delhi) case was the outcome of harassment of the delinquent by his friends. 3.3.2
Organized hackers
These kinds of hackers are mostly organized together to fulfill certain objective. The reason may be to fulfill their political bias, fundamentalism, etc. The Pakistanis are said to be one of the best quality hackers in the world. They mainly target the Indian government sites with the purpose to fulfill their political objectives. Further the NASA as well as the Microsoft sites is always under attack by the hackers. 3.3.3
Professional hackers / crackers
Their work is motivated by the colour of money. These kinds of hackers are mostly employed to hack the site of the rivals and get credible, reliable and valuable information. Further they are ven employed to crack the system of the employer basically as a measure to make it safer by detecting the loopholes. 3.3.4
Discontented employees
This group includes those people who have been either sacked by their employer or are dissatisfied with their employer. To avenge they normally hack the system of their employee.
3.4
Victims of Cybercrime
In general, victims of cybercrime are: i. ii. iii. iv.
Desperados and greedy people Gullible Unskilled and Inexperienced Unlucky people
8
4.0
IMPACT OF CYBERCRIME AGAINST INDIVIDUALS
Cyber crimes committed against people include various crimes like transmission of childpornography and harassment through e-mail. The trafficking, distribution, posting, and dissemination of obscene material including pornography constitute one of the most important cyber crimes known today. Cyber harassment is a distinct cyber crime. Harassment can be sexual, racial, religious, or other. This also brings us to another related area--violation of citizen which is a crime of grave nature.
4.1
Impacts against individuals
4.1.1
Harassment via e-mails
Harassment through e-mails is not a new concept. It is very similar to harassing through letters. Bangladesh police recently has taken plan to set up a special unit to curb cybercrimes. The matter has become more urgent since an e-mail message was sent to Bengali daily Prothom Alo, issuing a life threat to Awami League president and Leader of Opposition Sheikh Hasina on August 23, 2004. Another mail was sent to the police headquarters Aug 25, threatening Prime Minister Khaleda Zia, her son Tarique Rahman and Bangladesh Nationalist Party (BNP) lawmakers. The police department took the mails seriously and decided to set up a cyber crime control unit, which will be the country's first policing unit against cyber crime. Two young men, a private university student and a software engineer, were arrested in connection with the e-mail threatening the prime minister and another youth for threatening Sheikh Hasina. The first two have reportedly said that they had sent the mail for fun. As there is no nationwide computer infrastructure, no watchdog or security system has yet been developed in Bangladesh. 4.1.2
Cyber-stalking
The Oxford dictionary defines stalking as "pursuing stealthily". Cyber stalking involves following a person's movements across the Internet by posting messages (sometimes threatening) on the bulletin boards frequented by the victim, entering the chat-rooms frequented by the victim, constantly bombarding the victim with emails etc. 4.1.3
Pornography
Pornography on the net may take various forms. It may include the hosting of website containing these prohibited materials. Use of computers for producing these obscene materials. ing through the Internet, obscene materials. These obscene matters may cause harm to the mind of the adolescent and tend to deprave or corrupt their mind. Two known cases of pornography are the Delhi Bal Bharati case and the Bombay case wherein two Swiss couple used to force the slum children for obscene photographs. The Mumbai police later arrested them. 4.1.4
Defamation
It is an act of imputing any person with intent to lower the person in the estimation of the right-thinking of society generally or to cause him to be shunned or avoided or to expose him to hatred, contempt or ridicule. Cyber defamation is not different from
9 conventional defamation except the involvement of a virtual medium. E.g. the mail of Rohit was hacked and some mails were sent from his to some of his batch mates regarding his affair with a girl with intent to defame him. 4.1.5
E- mail spoofing
A spoofed e-mail may be said to be one, which misrepresents its origin. It shows it's origin to be different from which actually it originates. Recently spoofed mails were sent on the name of Mr. Na.Vijayashankar (naavi.org), which contained virus. Rajesh Manyar, a graduate student at Purdue University in Indiana, was arrested for threatening to detonate a nuclear device in the college campus. The alleged e- mail was sent from the of another student to the vice president for student services. However the mail was traced to be sent from the of Rajesh Manyar.(15) 4.1.6
Fraud & Cheating
Online fraud and cheating is one of the most lucrative businesses that are growing today in the cyber space. It may assume different forms. Some of the cases of online fraud and cheating that have come to light are those pertaining to credit card crimes, contractual crimes, offering jobs, etc. Recently the Court of Metropolitan Magistrate Delhi found guilty a 24-year-old engineer working in a call centre, of fraudulently gaining the details of Campa's credit card and bought a television and a cordless phone from Sony website. Metropolitan magistrate Gulshan Kumar convicted Azim for cheating under IPC, but did not send him to jail. Instead, Azim was asked to furnish a personal bond of Rs 20,000, and was released on a year's probation.
4.2
Impacts against individuals property
4.2.1
Computer vandalism
Vandalism means deliberately destroying or damaging property of another. Thus computer vandalism may include within its purview any kind of physical harm done to the computer of any person. These acts may take the form of the theft of a computer, some part of a computer or a peripheral attached to the computer or by physically damaging a computer or its peripherals. 4.2.2
Transmitting virus/worms
Viruses are programs that attach themselves to a computer or a file and then circulate themselves to other files and to other computers on a network. They usually affect the data on a computer, either by altering or deleting it. Worms, unlike viruses do not need the host to attach themselves to. They merely make functional copies of themselves and do this repeatedly till they eat up all the available space on a computer's memory. E.g. love bug virus, which affected at least 5 % of the computers of the globe. The losses were ed to be $ 10 million. The world's most famous worm was the Internet worm let loose on the Internet by Robert Morris sometime in 1988. Almost brought development of Internet to a complete halt.
10 4.2.2.1 Logic bombs These are event dependent programs. This implies that these programs are created to do something only when a certain event (known as a trigger event) occurs. E.g. even some viruses may be termed logic bombs because they lie dormant all through the year and become active only on a particular date (like the Chernobyl virus). 4.2.2.2 Trojan attacks This term has its origin in the word ‘Trojan horse’. In software field this means an unauthorized programme, which ively gains control over another’s system by representing itself as an authorized programme. The most common form of installing a Trojan is through e-mail. E.g. a Trojan was installed in the computer of a lady film director in the U.S. while chatting. The cyber criminal through the web cam installed in the computer obtained her nude photographs. He further harassed this lady. 4.2.3
Web jacking
This term is derived from the term hi jacking. In these kinds of offences the hacker gains access and control over the web site of another. He may even mutilate or change the information on the site. This may be done for fulfilling political objectives or for money. E.g. recently the site of MIT (Ministry of Information Technology) was hacked by the Pakistani hackers and some obscene matter was placed therein. Further the site of Bombay crime branch was also web jacked. Another case of web jacking is that of the ‘gold fish’ case. In this case the site was hacked and the information pertaining to gold fish was changed. Further a ransom of US $ 1 million was demanded as ransom. Thus web jacking is a process where by control over the site of another is made backed by some consideration for it. 4.2.4
Internet time thefts
Normally in these kinds of thefts the Internet surfing hours of the victim are used up by another person. This is done by gaining access to the ID and the . E.g. Colonel Bajwa’s case- the Internet hours were used up by any other person. This was perhaps one of the first reported cases related to cyber crime in India. However this case made the police infamous as to their lack of understanding of the nature of cyber crime. 4.2.5
Intellectual Property crimes / Distribution of pirated software
Intellectual property consists of a bundle of rights. Any unlawful act by which the owner is deprived completely or partially of his rights is an offence. The common form of IPR violation may be said to be software piracy, copyright infringement, trademark and service mark violation, theft of computer source code, etc. The Hyderabad Court has in a land mark judgment has convicted three people and sentenced them to six months imprisonment and fine of 50,000 each for unauthorized copying and sell of pirated software
11
5.0
IMPACT OF CYBERCRIME AGAINST ORGANIZATIONS
5.1
Unauthorized control/access over computer system
This activity is commonly referred to as hacking. The Indian law has however given a different connotation to the term hacking, so we will not use the term "unauthorized access" interchangeably with the term "hacking" to prevent confusion as the term used in the Act of 2000 is much wider than hacking.
5.2
Possession of unauthorized information
In June 2003, Cyber pirates hacked into the Internet of Barisal DC office marking the first cybercrime in the Barisal region. The computer hacking incident was revealed after the DC office received a heavily bloated Internet bill and lodged a complaint with the Bangladesh Telegraph and Telephone Board (BTTB), which is the internet service provider for the DC office. The hackers, who somehow got hold of the of the , accessed it from several places in town including an IT firm, residences of an ADC and a t secretary, and a Pharmaceutical company.
5.3
Software Pirate and Copyright
Results of an anonymous experiment conducted on more than 4,800 students in San Diego were presented at the American Psychological Association conference. It says that 38 percent of teenagers were involved in software piracy. In the context of Bangladesh most of the computer s are in the habit of using pirated software.
5.4
Financial Institutions are at risk
Bangladesh's financial institutions are at risk from hackers. In the country financial institutions have introduced various online features like online banking, stock exchange transactions but are not able to provide the highest security. Source said the cyber criminal networks through Internet have attacked our country's technology infrastructure. Recently, hackers interrupted the DSE transaction, which cost the small entrepreneurs dearly.
12
6.0
IMPACT OF CYBERCRIME AGAINST THE GOVERNMENT
Cyber terrorism is one distinct kind of crime in this category. The growth of internet has shown that the medium of Cyberspace is being used by individuals and groups to threaten the international governments as also to terrorize the citizens of a country. This crime manifests itself into terrorism when an individual "cracks" into a government or military maintained website. In a report of www.expressindia.com it was said that internet was becoming a boon for the terrorist organizations.
6.1
Cyber terrorism against the government organization
At this juncture a necessity may be felt that what is the need to distinguish between cyber terrorism and cybercrime. Both are criminal acts. However there is a compelling need to distinguish between both these crimes. A cyber crime is generally a domestic issue, which may have international consequences; however cyber terrorism is a global concern, which has domestic as well as international consequences. The common form of these terrorist attacks on the Internet is by distributed denial of service attacks, hate websites and hate emails, attacks on sensitive computer networks, etc. Technology savvy terrorists are using 512-bit encryption, which is next to impossible to decrypt. The recent example may be cited of – Osama Bin Laden, the LTTE, attack on America’s army deployment system during Iraq war. Cyber terrorism may be defined to be “ the premeditated use of disruptive activities, or the threat thereof, in cyber space, with the intention to further social, ideological, religious, political or similar objectives, or to intimidate any person in furtherance of such objectives”. Another definition may be attempted to cover within its ambit every act of cyber terrorism. A terrorist means a person who indulges in wanton killing of persons or in violence or in disruption of services or means of communications essential to the community or in damaging property with the view to – (1) putting the public or any section of the public in fear; or (2) affecting adversely the harmony between different religious, racial, language or regional groups or castes or communities; or (3) coercing or overawing the government established by law; or (4) endangering the sovereignty and integrity of the nation and a cyber terrorist is the person who uses the computer system as a means or ends to achieve the above objectives. Every act done in pursuance thereof is an act of cyber terrorism.
6.2
Trafficking
Trafficking may assume different forms. It may be trafficking in drugs, human beings, arms weapons etc. These forms of trafficking are going unchecked because they are carried on under pseudonyms. A racket was busted in Chennai where drugs were being sold under the pseudonym of honey. Traffickers use computer and information technology as an effective communication tool. They use IRC chat rooms in which people from anywhere the world come together and chat with each other. Criminals use it for meeting co-conspirators.
13
7.0
NECESSARY LEGISLATION S IN BANGLADESH TO TACKLE CYBERCRIME
Cyber crime can involve criminal activities that are traditional in nature, such as theft, fraud, forgery, defamation and mischief, all of which are subject to penal laws of a country. The abuse of computers has also given birth to a gamut of new age crimes that are addressed by the special laws enacted to penalize these crimes. For example, in Banlgadesh Tatha O Jogajog Projukty Ain 2006 (Information and Communication Technology Act, 2006) defines certain offences which does not cover by the Penal Code. And so it can be said that the Penal Code, 1860 is not effective enough in dealing with cybercrimes. Addl. IGP Mr. N.B.K. Tripura in his speech on the occasion of inaugurating Regional Cybercrime Seminar held on 5 November 2007 at hotel Sheraton, Dhaka said that- A case study of a computer virus, released by a young hacker in early 2000, highlights the huge imbalance between the crime and the punishment caused by the lack of adequate legislative measures to deal with the issue (Wojciech, 2007). The parliament of Bangladesh has enacted Information and Communication Technology Act, 2006 which defines certain activities as crime. The activities which made punishable under the Information and Technology Act of 2006 shall be the cybercrimes for the territory of Bangladesh. The activities are-
7.1
•
Mischief of computer and computer system
•
Alteration of source code of commuter
•
Hacking in computer system
•
Publication of false, indecent and defamatory statement or information in electronic form
•
Access in reserve system
•
False representation and concealment of information
•
False electronic signature certificate
•
Transmission of secrecy
•
Disclosing electronic signature for cheating
•
Committing crime through computer.
Cyber Tribunal
According to section 68 of the Information and Communication Technology Act, 2006 for the speedy and effective disposal of cases under this Act, Government shall establish one or more cyber tribunal. The tribunal shall try only the offences under this Act and the Government shall determine the local jurisdiction of the tribunal. In consultation with the Supreme Court, Government shall appoint on Sessions Judge or Additional Sessions Judge as a judge of Cyber Tribunal.
14 Cyber tribunal shall take a case for trial – a) upon the report of a police officer not below the rank of sub-inspector or b) upon a complaint made by a controller appointed under this Act or by any other person authorized by the controller. The trial procedure of cyber tribunal shall follow chapter 23 of Criminal Procedure Code, 1893 (trial procedure by the Court of Sessions) so far it is consistent. If the accused is absconded, tribunal can try the case in absentia. In this case tribunal has to circular an order in two bangla newspaper to appear the accused on a specified date. Cyber tribunal shall apply the provisions of Criminal Procedure Code and it shall have the same power, a Sessions Court empowered to apply in its original jurisdiction. Public prosecutor shall conduct the case on behalf of the Government. Tribunal shall conclude the trial within six months from the date of framing charge. This period may be extended for three months. Tribunal shall pronounce its judgment within ten days after the conclusion of trial which may be deferred for ten days.
7.2
Cyber Appellate Tribunal
The Government shall establish one or more cyber appellate tribunal. The appellate tribunal shall be constituted by one chairman and two appointed by the Government. To be appointed as a chairman of Cyber Appellate Tribunal, he must be either a former judge of the Supreme Court or existing judge of the Supreme Court or is eligible to be appointed as a judge of the Supreme Court. One of the two of the tribunal shall be a retired District Judge or employed in the judicial service and the other member must be an experienced and skilled person in information and communication technology. They shall be appointed for 3-5 years. Cyber Appellate Tribunal shall have no original jurisdiction. It shall only hear and dispose of appeals from the order and judgment of the Cyber Tribunal and Sessions Court in appropriate cases.4 The decision of the appellate tribunal shall be final and it shall have the power to alter, amend, and annul the order and judgment of the cyber tribunal. The appellate tribunal shall follow the appellate procedure of High Court Davison of the Supreme Court. Until cyber appellate tribunal is established, appeal may be heard by the High Court Division.
15
Section C: Conclusion and Recommendation 7.0
CONCLUSION
Basically, no notable cyber crime has yet been committed in Bangladesh. The gradual dependence and extensive use of computer and information technology by the financial institutions like bank, insurance company, and other non-government organizations increase the fear of commission of cyber crime here. Computer has been used as a tool of crime like making forged certificates and documents for a number of years in Bangladesh though the incident of targeting computer or computer system is very unusual. Some of the incidents that bring the notice of the public are: •
E-mail threatening to the former Prime Minister Sheikh Hasina from a cyber café.
•
Hacking the mail of BRAC Bangladesh.
•
Stealing the transaction report of Dhaka Stock Exchange through hacking .
•
Inserting porno movies to the web site of Bangladesh National Parliament.
•
Inserting the porno movies to the website of Jamate Islami Bangladesh.
•
Inserting the porno movies to the website of the Daily Jugantor newspaper.
•
E-mail threatening to World Bank Dhaka Office and the President of the United States George Bush.
Capacity of human mind is unfathomable. It is not possible to eliminate cybercrime from the cyberspace. It is quite possible to check them. History is the witness that no legislation has succeeded in totally eliminating crime from the globe. The only possible step is to make people aware of their rights and duties (to report crime as a collective duty towards the society) and further making the application of the laws more stringent to check crime. Undoubtedly the Act is a historical step in the cyber world. Further it cannot be denied that there is a need to bring changes in the Information Technology Act to make it more effective to combat cybercrime. It can be concluded with a word of caution for the pro-legislation school that it should be kept in mind that the provisions of the cyber law are not made so stringent that it may retard the growth of the industry and prove to be counter-productive.
16
8.0
RECOMMENDATION S
In the view of foregoing detail findings, discussion on the key findings and subsequent conclusions, a number of recommendations have been offered. It is suggested that the offered recommendations are prioritized before going into action. Some recommendations have policy implication and so those should be dealt with cautiously with inclusion of strong policy advocacy strategy in the process. Following recommendations are being offered: •
Clear and self-explanatory Standard Operating Procedure to be imposed immediately for the Cybercrime Unit;
•
A comprehensive induction program should be developed for all the concerns of ICT and implement it as pilot basis;
•
A separate Cybercrime Protection Act should be enacted;
•
There must be a clear operating procedure to run Cybercafé and VOIP in Bangladesh.
17
NOTES
1
Cyber- combining form (in nouns and adjectives) connected with electronic communication networks especially the internet.
2
Kind of shop/outlet in where customer can use internet by paid.
20
BIBLIOGRAPHY
1. The Penal Code, 1860 (Act No. XLV of 1860) 2. The Information and Communication Technology Act, 2006 3. Report on Regional Cybercrime Seminar, Dhaka (2007) 4. Boham and Haley (2002) 5. Kumar Vinod – Winning the Battle against Cyber Crime 6. Kapoor G.V. - Byte by Byte 7. Mehta Dewang- Role of Police In Tackling Internet Crimes 8. Duggal Pawan – The Internet: Legal Dimensions 9. Monjur Kader: Criminology (Cybercrime)
Cybercrime and Its Impact in Bangladesh Title Page
Prepared for: Prof. M. Z. Manum Course Instructor: Business Communication MBA Program
Prepared by: Md. Tanvir Hasan ID. 091051019 Md. Azizul Haque ID. 091052005 Taranna Ansar ID. 091051029 Naznin Akther Runa ID. 091051034 Belal Hossain ID. 091052007
ULAB, Dhaka May 10, 2009 ii
Preface Cyber and technology related crime is on the increase and current trends indicate that it will be a significant issue in Bangladesh. It has already been seen that a glomming threat becomes visible in the arena of information technology. Recently the hacking of RAB website and e-mail threats of former prime minister are example for few of them. In contrast, cybercrime is becoming a threat to government itself. Due to lack of necessary legislation to tackle such type of crime, cyber criminals are almost in the safe side to commit such crime. In the Information and Communication Technology Act. 2006, there are several clauses against cybercrime. But this Information and Communication Technology act is not the concert one. By enacting this act, there is a chance to become safe side after committing crimes. So, considering these facts a comprehensive Cybercrime Protection Act should be imposed. This report incorporates the impacts of cybercrime in Bangladesh especially focuses on the area of Personal life, Workplace as well as Policy making Bodies or thinkers. We believe the report would help all relevant concerns and especially policy makers.
iii
Abbreviation and Acronyms AFP BP BTTB CID ICT IOP IRC TEDS
Australian Federal Police Bangladesh Police Bangladesh Telegraph and Telephone Board Criminal Investigations Department Information and Communication Technology Investigations, Operations and Prosecutions Internet Relay Chat Training and Executive Development Specialist
iv
Table of Contents Chapters
1.0
2.0
3.0
4.0
Description
Page No.
Title Fly Title Page Preface Abbreviation and Acronyms Executive Summary INTRODUCTION 1.1 Background 1.2 Problems 1.3 Objectives 1.4 Scopes and Limitation 1.5 Hypothesis 1.7 Rationale METHODOLOGY 2.1 Study Area 2.2 Target Audiences 2.3 Data Collection Method TYPES OF CYBERCRIME WITH THE PROFILE OF CYBER CRIMINALS AND VICTIMS AND REASONS 3.1 Types of Cybercrime 3.1.1 Hacking 3.1.2 Virus Dissemination 3.1.3 Software Piracy 3.1.4 Pornography 3.1.5 Credit Card Fraud 3.2 Reasons of cybercrime 3.2.1 Capacity to store data in comparatively small space 3.2.2 Easy to access 3.2.3 Complex 3.2.4 Negligence 3.2.5 Loss of evidence 3.3 Profile of Cyber Criminals 3.3.1 Children and adolescents 3.3.2 Organized hackers 3.3.3 Professional hackers / crackers 3.3.4 Discontented employees 3.4 Victims of Cybercrime IMPACT OF CYBERCRIME AGAINST INDIVIDUALS 4.1 Impacts against individuals v
i ii iii iv vii 1 1 1 2 2 2 3 4 4 4 4 5 5 5 5 5 5 5 6 6 6 6 6 6 6 7 7 7 7 7 8 8
Chapters
5.0
6.0
7.0
8.0 9.0
Description
Page No.
4.1.1 Harassment via e-mails 4.1.2 Cyber-stalking 4.1.3 Pornography 4.1.4 Defamation 4.1.5 E- mail spoofing 4.1.6 Fraud & Cheating 4.2 Impacts against individuals property 4.2.1 Computer vandalism 4.2.2 Transmitting virus/worms 4.2.2.1 Logic bombs 4.2.2.2 Trojan attacks 4.2.3 Web jacking 4.2.4 Internet time thefts 4.2.5 Intellectual Property crimes IMPACT OF CYBERCRIME AGAINST ORGANIZATIONS 5.1 Unauthorized control/access over computer system 5.2 Possession of unauthorized information 5.3 Software Pirate and Copyright 5.4 Financial Institutions are at risk IMPACT OF CYBERCRIME AGAINST THE GOVERNMENT 6.1 Cyber terrorism against the government organization 6.2 Trafficking NECESSARY LEGISLATIONS IN BANGLADESH TO TACKLE CYBERCRIME 7.1 Cyber Tribunal 7.2 Cyber Appellate Tribunal CONCLUSION RECOMMENDATIONS NOTES Appendix 1 Target Audience Covered References Bibliography
vi
8 8 8 8 9 9 9 9 9 10 10 10 10 10 11 11 11 11 11 12 12 12 13 13 14 15 16 17 18 19 20
Executive Summary 1. Introduction Cybercrime has already become a going concern in both private as well as public sector in Bangladesh. During the last decade private and public sector has done a revolution with the use of technical enhancement. Due to unauthorized intervention to the system, company loses huge confidential information which caused a large amount of financial lose. It has already been identified that especially Financial Institutions are in the most threading organization for cybercrime that at the same time reflects to the personal life. Some development partners has started working how to tackle cybercrime and improve effective communications.
2. Methodology Employing the following qualitative methods has collected the relevant information: •
Literature Review (secondary source of information; journals, reports etc.)
•
In-depth interviews were made with the Manager and others of Cybercafé.
•
Focus Group Discussion with the students of private university.
•
Key Informant Interview with the Member of Cybercrime unit.
3. Types of Cybercrime Cyber crime is the latest and perhaps the most complicated problem in the cyber world. “Cyber crime may be said to be those species, of which, genus is the conventional crime, and where either the computer is an object or subject of the conduct constituting crime”. “Any criminal activity that uses a computer either as an instrumentality, target or a means for perpetuating further crimes comes within the ambit of cyber crime.
4. Impact of Cybercrime against Individuals Cyber crimes committed against people include various crimes like transmission of childpornography and harassment through e-mail. The trafficking, distribution, posting, and dissemination of obscene material including pornography constitute one of the most important cyber crimes known today. Cyber harassment is a distinct cyber crime. Harassment can be sexual, racial, religious, or other. This also brings us to another related area--violation of citizen which is a crime of grave nature.
5. Impact of Cybercrime against O rganizations This activity is commonly referred to as hacking. The Indian law has however given a different connotation to the term hacking, so we will not use the term "unauthorized access" interchangeably with the term "hacking" to prevent confusion as the term used in the Act of 2000 is much wider than hacking. vii
Bangladesh's financial institutions are at risk from hackers. In the country financial institutions have introduced various online features like online banking, stock exchange transactions but are not able to provide the highest security. Source said the cyber criminal networks through Internet have attacked our country's technology infrastructure. Recently, hackers interrupted the DSE transaction, which cost the small entrepreneurs dearly.
6. Impact of Cybercrime against the G overnment Cyber terrorism is one distinct kind of crime in this category. The growth of internet has shown that the medium of Cyberspace is being used by individuals and groups to threaten the international governments as also to terrorize the citizens of a country. Cyber terrorism may be defined to be “ the premeditated use of disruptive activities, or the threat thereof, in cyber space, with the intention to further social, ideological, religious, political or similar objectives, or to intimidate any person in furtherance of such objectives”.
7. Necessary Legislations in Bangladesh Cyber crime can involve criminal activities that are traditional in nature, such as theft, fraud, forgery, defamation and mischief, all of which are subject to penal laws of a country. The abuse of computers has also given birth to a gamut of new age crimes that are addressed by the special laws enacted to penalize these crimes. For example, in Bangladesh Tatha O Jogajog Projukty Ain 2006 (Information and Communication Technology Act, 2006) defines certain offences which does not cover by the Penal Code. And so it can be said that the Penal Code, 1860 is not effective enough in dealing with cybercrime.
7. Conclusion Capacity of human mind is unfathomable. It is not possible to eliminate cybercrime from the cyberspace. It is quite possible to check them. History is the witness that no legislation has succeeded in totally eliminating crime from the globe. The only possible step is to make people aware of their rights and duties and further making the application of the laws more stringent to check crime. Undoubtedly the Act is a historical step in the cyber world. Further it cannot be denied that there is a need to bring changes in the Information Technology Act to make it more effective to combat cybercrime. It can be concluded with a word of caution for the pro-legislation school that it should be kept in mind that the provisions of the cyber law are not made so stringent that it may retard the growth of the industry and prove to be counter-productive.
8. Recommendations •
Clear and self-explanatory Standard Operating Procedure to be imposed immediately for the Cybercrime Unit;
•
A comprehensive induction program should be developed for all the concerns of ICT and implement it as pilot basis;
•
A separate Cybercrime Protection Act should be enacted. viii
1
Section A: Introduction and Methodology 1.0
INTRODUCTION
This report is the outcome of the study on Cybercrime and Its Impact in Bangladesh. Commissioned by the Course Instructor of the Business Communication Prof. M. Z. Mamun, this study has been conducted in May 2009. The information generated by means of the study is cross-cutting across various chapters presented in the report. Therefore, it may appear that there is a lot of duplication of information. This has been done knowingly as it is essential because the target audiences of the study and the issues addressed are very much related with each other.
1.1
Background
In the words attributed to the Greek Philosopher, Heraclitus, there is nothing permanent but change. These words, written almost 2500 years ago, are very true today: we are living in a constantly changing world. The most rapid pace of change that we see is in the world of computer or the information and communication technology. Over the last fifteen years, the increase in technology and the use of computer, in both the personal and business sector has increased remarkably. This technology advance has ensured that the twenty first century is the information age. With all the possibilities that the new technology offers for progress and development, the same technology can be used for malicious and criminal purposes. A couple of years ago, fishing spelled with “F” was a pleasant activity with a fishing rod or a net where you could land yourself a nice meal for you and your family. Today, phishing, spelled with “PH” is an activity with a fake website or email where one can land credit card or bank details. We are extremely dependent on the cyber1 world for both our professional and personal work. With this growing dependency on information and communication technologies (ICT), there has emerged new threats to network and information security. There is an ever-growing vulnerability to cybercrime in today’s world. This is also true for Bangladesh where the number of internet s is growing rapidly and where ICT is important for the economy.
1.2
Problems
Cybercrime generally refers to criminal activity where a computer or network is the source, tool, target, or place of a crime. These categories are not exclusive and many activities can be characterized as falling in one or more. Although the term cybercrime is more properly restricted to describing criminal activity in which the computer or network is a necessary part of the crime, this term is also sometimes used to include traditional crimes, such as fraud, theft, blackmail etc., in which computer or networks are used. As the use of computers has grown, cybercrime has become more important. Cybercrime, as a transnational crime, is a global issue with a global impact. Increased sophistication of cybercrime attacks and vulnerability of information available online is a serious concern for institutions, law enforcement agencies and other stakeholders.
2 Victims of these attacks are not just private citizens or organizations with limited resources available to protect themselves but very large companies.
1.3
Objectives
The overall purpose of the study was to identify the impact of cybercrime in Bangladesh with regard to technological enhancement. The study has embarked upon the specific objectives are to assess: •
Types of cybercrime with the profile of cyber criminals and victims;
•
Impact of cybercrime against individuals;
•
Impact of cybercrime against organizations;
•
Impact of cybercrime against the Government;
•
Necessary Legislations in Bangladesh to tackle Cybercrime.
1.4
Scopes and Limitation
Cybercrime does not know the border. The same technology that brings people of the world closer together has a darker side, making it easier for criminal or malicious elements to steal, destroy, corrupt, defraud and exploit. They do not have to be near they can do so from another country or continent. Internet technology has come to Bangladesh quite late. But, the country does not leg behind when it comes to cybercrimes. As most of the organizations in Bangladesh are very keen to use the opportunity of the internet technology, the potential threats can not be ruled out. Due to availability and comparatively cheaper prize of a personal computer, interest to use them for day to day personal business is being grown up. Considering the above views, the study was conducted at all levels (corporate and/or personal) in where ICT has arrived with its prospect. The study has suffered certain limitations as below:
1.5
•
The duration of the study was very short. More in-depth investigation would have resulted better outputs;
•
Lack of resources has hampered the study to some extent;
•
Access to information is very difficult. In most cases, concerned persons were very rigid to share adequate information.
Hypothesis
Technology is used by both Crooks and Cops! Cybercrimes such as online hacking, software piracy, virus dissemination, child pornography, credit card fraud etc. represent new crime methods, and continue to grow at an alarming rate. These create new and severe problems that are very complex to tackle. Organizations are being cheated with a lot of money as well as information. At the same time, they are engaging huge resources to hinder it.
3
1.6
Rationale
Cybercrime has already become a going concern in both private as well as public sector in Bangladesh. During the last decade private and public sector has done a revolution with the use of technical enhancement. Due to unauthorized intervention to the system, company loses huge confidential information which caused a large amount of financial lose. It has already been identified that especially Financial Institutions are in the most threading organization for cybercrime that at the same time reflects to the personal life. Some development partners has started working how to tackle cybercrime and improve effective communications. In the view above, it can be assumed that this report in general will be helpful for all concerned. In particular, development partners will be able to identify the how it affects in every arena of our country. Persons will be able to become aware having idea how it impacts to human life. Finally, policy makers will be having a clear idea on the impacts of cybercrime to all arenas that will enable to prepare and implement a comprehensive strategy or action plan.
4
2.0
METHODOLOGY
By design, this is an exploratory type of qualitative study attempts to unearth the in-depth of cybercrime in Bangladesh.
2.1
Study Area
The study has been carried out in all sectors where technological intervention has already become as essential. The below table shows the organizations covered within the purview of the study: Sl. Details Cybercafé 2 i. HotSpot Cybercafé in Mirpur ii. Blue Planet.Com in Dhanmondi iii. Global Windows in Uttara Banks iv. Dhaka Bank Private University v. Eastern University vi. University of Asia Pacific Government Agencies vii. Cybercrime Unit at CID, BP
2.2
Target Audiences
In order to collect relevant information for the study following target audiences were brought within purview of the study (Appendix 1): •
Manager of Cybercafé
•
Technical Experts of Cybercafé
•
Automatic Trailer Machine in Bank
•
Students of Computer Science of different universities
•
of Cybercrime Unit at CID, Bangladesh Police
•
of general public
2.3
Data Collection Method
Employing the following qualitative methods has collected the relevant information: •
Literature Review (secondary source of information; journals, reports etc.)
•
In-depth interviews were made with the Manager and others of Cybercafé.
•
Focus Group Discussion with the students of private university.
•
Key Informant Interview with the Member of Cybercrime unit.
5
Section B: Details Findings 3.0
TYPES OF CYBERCRIME WITH THE PROFILE OF CYBER CRIMINALS AND VICT IMS AND REASONS
Cyber crime is the latest and perhaps the most complicated problem in the cyber world. “Cyber crime may be said to be those species, of which, genus is the conventional crime, and where either the computer is an object or subject of the conduct constituting crime”. “Any criminal activity that uses a computer either as an instrumentality, target or a means for perpetuating further crimes comes within the ambit of cyber crime.
3.1
Types of Cybercrime
All crimes performed by abuse of electronic media or otherwise, with the purpose of influencing the functioning of computer or computer system. The followings are the top listed types of cybercrime: 3.1.1
Hacking
Hacking is a simple term means illegal intrusion into a computer system without the permission of the computer owner/. Hackers usually do that with the intention of obtaining confidential information. 3.1.2
Virus Dissemination
Virus itself is software that attacks other software. It may cause for data loss, deduction of bandwidth speed, hardware damage etc. Trojan Horse, Time Bomb, Logic Bomb, Rabbit are the malicious software. 3.1.3
Software Piracy
Theft of software through the illegal coping of genuine programs or distribution of products intended to for the original. 3.1.4
Pornography
Pornography is the first consistently successful e-commerce product (Official website of the Cybercrime Investigation Cell, Crime Branch, CID, Mumbai). Deceptive marketing tactics and mouse trapping technologies pornography encourage customers to access their website. Anybody including children can log on to the internet and access website with pornographic contents with a click of a mouse. 3.1.5
Credit Card Fraud
You simply have to type credit card number into www page of the vendor for online transaction. If electronic transactions are not secured the credit card numbers can be stolen by the hackers who can misuse this card by impersonating the credit card owner.
6
3.2
Reasons of cybercrime
Hart in his work “The Concept of Law” has said ‘human beings are vulnerable so rule of law is required to protect them’. Applying this to the cyberspace we may say that computers are vulnerable so rule of law is required to protect and safeguard them against cyber crime. The reasons for the vulnerability of computers may be said to be: 3.2.1
Capacity to store data in comparatively small space
The computer has unique characteristic of storing data in a very small space. This affords to remove or derive information either through physical or virtual medium makes it much easier. 3.2.2
Easy to access
The problem encountered in guarding a computer system from unauthorized access is that there is every possibility of breach not due to human error but due to the complex technology. By secretly implanted logic bomb, key loggers that can steal access codes, advanced voice recorders; retina imagers etc. that can fool biometric systems and by firewalls can be utilized to get past many a security system. 3.2.3
Complex
The computers work on operating systems and these operating systems in turn are composed of millions of codes. Human mind is fallible and it is not possible that there might not be a lapse at any stage. The cyber criminals take advantage of these lacunas and penetrate into the computer system. 3.2.4
Negligence
Negligence is very closely connected with human conduct. It is therefore very probable that while protecting the computer system there might be any negligence, which in turn provides a cyber criminal to gain access and control over the computer system. 3.2.5
Loss of evidence
Loss of evidence is a very common & obvious problem as all the data are routinely destroyed. Further collection of data outside the territorial extent also paralyses this system of crime investigation.
3.3
Profile of Cyber C riminals
The cyber criminals constitute of various groups/ category. This division may be justified on the basis of the object that they have in their mind. The following are the category of cyber criminals-
7 3.3.1
Children and adolescents between the age group of 6 – 18 years
The simple reason for this type of delinquent behaviour pattern in children is seen mostly due to the inquisitiveness to know and explore the things. Other cognate reason may be to prove themselves to be outstanding amongst other children in their group. Further the reasons may be psychological even. E.g. the Bal Bharati (Delhi) case was the outcome of harassment of the delinquent by his friends. 3.3.2
Organized hackers
These kinds of hackers are mostly organized together to fulfill certain objective. The reason may be to fulfill their political bias, fundamentalism, etc. The Pakistanis are said to be one of the best quality hackers in the world. They mainly target the Indian government sites with the purpose to fulfill their political objectives. Further the NASA as well as the Microsoft sites is always under attack by the hackers. 3.3.3
Professional hackers / crackers
Their work is motivated by the colour of money. These kinds of hackers are mostly employed to hack the site of the rivals and get credible, reliable and valuable information. Further they are ven employed to crack the system of the employer basically as a measure to make it safer by detecting the loopholes. 3.3.4
Discontented employees
This group includes those people who have been either sacked by their employer or are dissatisfied with their employer. To avenge they normally hack the system of their employee.
3.4
Victims of Cybercrime
In general, victims of cybercrime are: i. ii. iii. iv.
Desperados and greedy people Gullible Unskilled and Inexperienced Unlucky people
8
4.0
IMPACT OF CYBERCRIME AGAINST INDIVIDUALS
Cyber crimes committed against people include various crimes like transmission of childpornography and harassment through e-mail. The trafficking, distribution, posting, and dissemination of obscene material including pornography constitute one of the most important cyber crimes known today. Cyber harassment is a distinct cyber crime. Harassment can be sexual, racial, religious, or other. This also brings us to another related area--violation of citizen which is a crime of grave nature.
4.1
Impacts against individuals
4.1.1
Harassment via e-mails
Harassment through e-mails is not a new concept. It is very similar to harassing through letters. Bangladesh police recently has taken plan to set up a special unit to curb cybercrimes. The matter has become more urgent since an e-mail message was sent to Bengali daily Prothom Alo, issuing a life threat to Awami League president and Leader of Opposition Sheikh Hasina on August 23, 2004. Another mail was sent to the police headquarters Aug 25, threatening Prime Minister Khaleda Zia, her son Tarique Rahman and Bangladesh Nationalist Party (BNP) lawmakers. The police department took the mails seriously and decided to set up a cyber crime control unit, which will be the country's first policing unit against cyber crime. Two young men, a private university student and a software engineer, were arrested in connection with the e-mail threatening the prime minister and another youth for threatening Sheikh Hasina. The first two have reportedly said that they had sent the mail for fun. As there is no nationwide computer infrastructure, no watchdog or security system has yet been developed in Bangladesh. 4.1.2
Cyber-stalking
The Oxford dictionary defines stalking as "pursuing stealthily". Cyber stalking involves following a person's movements across the Internet by posting messages (sometimes threatening) on the bulletin boards frequented by the victim, entering the chat-rooms frequented by the victim, constantly bombarding the victim with emails etc. 4.1.3
Pornography
Pornography on the net may take various forms. It may include the hosting of website containing these prohibited materials. Use of computers for producing these obscene materials. ing through the Internet, obscene materials. These obscene matters may cause harm to the mind of the adolescent and tend to deprave or corrupt their mind. Two known cases of pornography are the Delhi Bal Bharati case and the Bombay case wherein two Swiss couple used to force the slum children for obscene photographs. The Mumbai police later arrested them. 4.1.4
Defamation
It is an act of imputing any person with intent to lower the person in the estimation of the right-thinking of society generally or to cause him to be shunned or avoided or to expose him to hatred, contempt or ridicule. Cyber defamation is not different from
9 conventional defamation except the involvement of a virtual medium. E.g. the mail of Rohit was hacked and some mails were sent from his to some of his batch mates regarding his affair with a girl with intent to defame him. 4.1.5
E- mail spoofing
A spoofed e-mail may be said to be one, which misrepresents its origin. It shows it's origin to be different from which actually it originates. Recently spoofed mails were sent on the name of Mr. Na.Vijayashankar (naavi.org), which contained virus. Rajesh Manyar, a graduate student at Purdue University in Indiana, was arrested for threatening to detonate a nuclear device in the college campus. The alleged e- mail was sent from the of another student to the vice president for student services. However the mail was traced to be sent from the of Rajesh Manyar.(15) 4.1.6
Fraud & Cheating
Online fraud and cheating is one of the most lucrative businesses that are growing today in the cyber space. It may assume different forms. Some of the cases of online fraud and cheating that have come to light are those pertaining to credit card crimes, contractual crimes, offering jobs, etc. Recently the Court of Metropolitan Magistrate Delhi found guilty a 24-year-old engineer working in a call centre, of fraudulently gaining the details of Campa's credit card and bought a television and a cordless phone from Sony website. Metropolitan magistrate Gulshan Kumar convicted Azim for cheating under IPC, but did not send him to jail. Instead, Azim was asked to furnish a personal bond of Rs 20,000, and was released on a year's probation.
4.2
Impacts against individuals property
4.2.1
Computer vandalism
Vandalism means deliberately destroying or damaging property of another. Thus computer vandalism may include within its purview any kind of physical harm done to the computer of any person. These acts may take the form of the theft of a computer, some part of a computer or a peripheral attached to the computer or by physically damaging a computer or its peripherals. 4.2.2
Transmitting virus/worms
Viruses are programs that attach themselves to a computer or a file and then circulate themselves to other files and to other computers on a network. They usually affect the data on a computer, either by altering or deleting it. Worms, unlike viruses do not need the host to attach themselves to. They merely make functional copies of themselves and do this repeatedly till they eat up all the available space on a computer's memory. E.g. love bug virus, which affected at least 5 % of the computers of the globe. The losses were ed to be $ 10 million. The world's most famous worm was the Internet worm let loose on the Internet by Robert Morris sometime in 1988. Almost brought development of Internet to a complete halt.
10 4.2.2.1 Logic bombs These are event dependent programs. This implies that these programs are created to do something only when a certain event (known as a trigger event) occurs. E.g. even some viruses may be termed logic bombs because they lie dormant all through the year and become active only on a particular date (like the Chernobyl virus). 4.2.2.2 Trojan attacks This term has its origin in the word ‘Trojan horse’. In software field this means an unauthorized programme, which ively gains control over another’s system by representing itself as an authorized programme. The most common form of installing a Trojan is through e-mail. E.g. a Trojan was installed in the computer of a lady film director in the U.S. while chatting. The cyber criminal through the web cam installed in the computer obtained her nude photographs. He further harassed this lady. 4.2.3
Web jacking
This term is derived from the term hi jacking. In these kinds of offences the hacker gains access and control over the web site of another. He may even mutilate or change the information on the site. This may be done for fulfilling political objectives or for money. E.g. recently the site of MIT (Ministry of Information Technology) was hacked by the Pakistani hackers and some obscene matter was placed therein. Further the site of Bombay crime branch was also web jacked. Another case of web jacking is that of the ‘gold fish’ case. In this case the site was hacked and the information pertaining to gold fish was changed. Further a ransom of US $ 1 million was demanded as ransom. Thus web jacking is a process where by control over the site of another is made backed by some consideration for it. 4.2.4
Internet time thefts
Normally in these kinds of thefts the Internet surfing hours of the victim are used up by another person. This is done by gaining access to the ID and the . E.g. Colonel Bajwa’s case- the Internet hours were used up by any other person. This was perhaps one of the first reported cases related to cyber crime in India. However this case made the police infamous as to their lack of understanding of the nature of cyber crime. 4.2.5
Intellectual Property crimes / Distribution of pirated software
Intellectual property consists of a bundle of rights. Any unlawful act by which the owner is deprived completely or partially of his rights is an offence. The common form of IPR violation may be said to be software piracy, copyright infringement, trademark and service mark violation, theft of computer source code, etc. The Hyderabad Court has in a land mark judgment has convicted three people and sentenced them to six months imprisonment and fine of 50,000 each for unauthorized copying and sell of pirated software
11
5.0
IMPACT OF CYBERCRIME AGAINST ORGANIZATIONS
5.1
Unauthorized control/access over computer system
This activity is commonly referred to as hacking. The Indian law has however given a different connotation to the term hacking, so we will not use the term "unauthorized access" interchangeably with the term "hacking" to prevent confusion as the term used in the Act of 2000 is much wider than hacking.
5.2
Possession of unauthorized information
In June 2003, Cyber pirates hacked into the Internet of Barisal DC office marking the first cybercrime in the Barisal region. The computer hacking incident was revealed after the DC office received a heavily bloated Internet bill and lodged a complaint with the Bangladesh Telegraph and Telephone Board (BTTB), which is the internet service provider for the DC office. The hackers, who somehow got hold of the of the , accessed it from several places in town including an IT firm, residences of an ADC and a t secretary, and a Pharmaceutical company.
5.3
Software Pirate and Copyright
Results of an anonymous experiment conducted on more than 4,800 students in San Diego were presented at the American Psychological Association conference. It says that 38 percent of teenagers were involved in software piracy. In the context of Bangladesh most of the computer s are in the habit of using pirated software.
5.4
Financial Institutions are at risk
Bangladesh's financial institutions are at risk from hackers. In the country financial institutions have introduced various online features like online banking, stock exchange transactions but are not able to provide the highest security. Source said the cyber criminal networks through Internet have attacked our country's technology infrastructure. Recently, hackers interrupted the DSE transaction, which cost the small entrepreneurs dearly.
12
6.0
IMPACT OF CYBERCRIME AGAINST THE GOVERNMENT
Cyber terrorism is one distinct kind of crime in this category. The growth of internet has shown that the medium of Cyberspace is being used by individuals and groups to threaten the international governments as also to terrorize the citizens of a country. This crime manifests itself into terrorism when an individual "cracks" into a government or military maintained website. In a report of www.expressindia.com it was said that internet was becoming a boon for the terrorist organizations.
6.1
Cyber terrorism against the government organization
At this juncture a necessity may be felt that what is the need to distinguish between cyber terrorism and cybercrime. Both are criminal acts. However there is a compelling need to distinguish between both these crimes. A cyber crime is generally a domestic issue, which may have international consequences; however cyber terrorism is a global concern, which has domestic as well as international consequences. The common form of these terrorist attacks on the Internet is by distributed denial of service attacks, hate websites and hate emails, attacks on sensitive computer networks, etc. Technology savvy terrorists are using 512-bit encryption, which is next to impossible to decrypt. The recent example may be cited of – Osama Bin Laden, the LTTE, attack on America’s army deployment system during Iraq war. Cyber terrorism may be defined to be “ the premeditated use of disruptive activities, or the threat thereof, in cyber space, with the intention to further social, ideological, religious, political or similar objectives, or to intimidate any person in furtherance of such objectives”. Another definition may be attempted to cover within its ambit every act of cyber terrorism. A terrorist means a person who indulges in wanton killing of persons or in violence or in disruption of services or means of communications essential to the community or in damaging property with the view to – (1) putting the public or any section of the public in fear; or (2) affecting adversely the harmony between different religious, racial, language or regional groups or castes or communities; or (3) coercing or overawing the government established by law; or (4) endangering the sovereignty and integrity of the nation and a cyber terrorist is the person who uses the computer system as a means or ends to achieve the above objectives. Every act done in pursuance thereof is an act of cyber terrorism.
6.2
Trafficking
Trafficking may assume different forms. It may be trafficking in drugs, human beings, arms weapons etc. These forms of trafficking are going unchecked because they are carried on under pseudonyms. A racket was busted in Chennai where drugs were being sold under the pseudonym of honey. Traffickers use computer and information technology as an effective communication tool. They use IRC chat rooms in which people from anywhere the world come together and chat with each other. Criminals use it for meeting co-conspirators.
13
7.0
NECESSARY LEGISLATION S IN BANGLADESH TO TACKLE CYBERCRIME
Cyber crime can involve criminal activities that are traditional in nature, such as theft, fraud, forgery, defamation and mischief, all of which are subject to penal laws of a country. The abuse of computers has also given birth to a gamut of new age crimes that are addressed by the special laws enacted to penalize these crimes. For example, in Banlgadesh Tatha O Jogajog Projukty Ain 2006 (Information and Communication Technology Act, 2006) defines certain offences which does not cover by the Penal Code. And so it can be said that the Penal Code, 1860 is not effective enough in dealing with cybercrimes. Addl. IGP Mr. N.B.K. Tripura in his speech on the occasion of inaugurating Regional Cybercrime Seminar held on 5 November 2007 at hotel Sheraton, Dhaka said that- A case study of a computer virus, released by a young hacker in early 2000, highlights the huge imbalance between the crime and the punishment caused by the lack of adequate legislative measures to deal with the issue (Wojciech, 2007). The parliament of Bangladesh has enacted Information and Communication Technology Act, 2006 which defines certain activities as crime. The activities which made punishable under the Information and Technology Act of 2006 shall be the cybercrimes for the territory of Bangladesh. The activities are-
7.1
•
Mischief of computer and computer system
•
Alteration of source code of commuter
•
Hacking in computer system
•
Publication of false, indecent and defamatory statement or information in electronic form
•
Access in reserve system
•
False representation and concealment of information
•
False electronic signature certificate
•
Transmission of secrecy
•
Disclosing electronic signature for cheating
•
Committing crime through computer.
Cyber Tribunal
According to section 68 of the Information and Communication Technology Act, 2006 for the speedy and effective disposal of cases under this Act, Government shall establish one or more cyber tribunal. The tribunal shall try only the offences under this Act and the Government shall determine the local jurisdiction of the tribunal. In consultation with the Supreme Court, Government shall appoint on Sessions Judge or Additional Sessions Judge as a judge of Cyber Tribunal.
14 Cyber tribunal shall take a case for trial – a) upon the report of a police officer not below the rank of sub-inspector or b) upon a complaint made by a controller appointed under this Act or by any other person authorized by the controller. The trial procedure of cyber tribunal shall follow chapter 23 of Criminal Procedure Code, 1893 (trial procedure by the Court of Sessions) so far it is consistent. If the accused is absconded, tribunal can try the case in absentia. In this case tribunal has to circular an order in two bangla newspaper to appear the accused on a specified date. Cyber tribunal shall apply the provisions of Criminal Procedure Code and it shall have the same power, a Sessions Court empowered to apply in its original jurisdiction. Public prosecutor shall conduct the case on behalf of the Government. Tribunal shall conclude the trial within six months from the date of framing charge. This period may be extended for three months. Tribunal shall pronounce its judgment within ten days after the conclusion of trial which may be deferred for ten days.
7.2
Cyber Appellate Tribunal
The Government shall establish one or more cyber appellate tribunal. The appellate tribunal shall be constituted by one chairman and two appointed by the Government. To be appointed as a chairman of Cyber Appellate Tribunal, he must be either a former judge of the Supreme Court or existing judge of the Supreme Court or is eligible to be appointed as a judge of the Supreme Court. One of the two of the tribunal shall be a retired District Judge or employed in the judicial service and the other member must be an experienced and skilled person in information and communication technology. They shall be appointed for 3-5 years. Cyber Appellate Tribunal shall have no original jurisdiction. It shall only hear and dispose of appeals from the order and judgment of the Cyber Tribunal and Sessions Court in appropriate cases.4 The decision of the appellate tribunal shall be final and it shall have the power to alter, amend, and annul the order and judgment of the cyber tribunal. The appellate tribunal shall follow the appellate procedure of High Court Davison of the Supreme Court. Until cyber appellate tribunal is established, appeal may be heard by the High Court Division.
15
Section C: Conclusion and Recommendation 7.0
CONCLUSION
Basically, no notable cyber crime has yet been committed in Bangladesh. The gradual dependence and extensive use of computer and information technology by the financial institutions like bank, insurance company, and other non-government organizations increase the fear of commission of cyber crime here. Computer has been used as a tool of crime like making forged certificates and documents for a number of years in Bangladesh though the incident of targeting computer or computer system is very unusual. Some of the incidents that bring the notice of the public are: •
E-mail threatening to the former Prime Minister Sheikh Hasina from a cyber café.
•
Hacking the mail of BRAC Bangladesh.
•
Stealing the transaction report of Dhaka Stock Exchange through hacking .
•
Inserting porno movies to the web site of Bangladesh National Parliament.
•
Inserting the porno movies to the website of Jamate Islami Bangladesh.
•
Inserting the porno movies to the website of the Daily Jugantor newspaper.
•
E-mail threatening to World Bank Dhaka Office and the President of the United States George Bush.
Capacity of human mind is unfathomable. It is not possible to eliminate cybercrime from the cyberspace. It is quite possible to check them. History is the witness that no legislation has succeeded in totally eliminating crime from the globe. The only possible step is to make people aware of their rights and duties (to report crime as a collective duty towards the society) and further making the application of the laws more stringent to check crime. Undoubtedly the Act is a historical step in the cyber world. Further it cannot be denied that there is a need to bring changes in the Information Technology Act to make it more effective to combat cybercrime. It can be concluded with a word of caution for the pro-legislation school that it should be kept in mind that the provisions of the cyber law are not made so stringent that it may retard the growth of the industry and prove to be counter-productive.
16
8.0
RECOMMENDATION S
In the view of foregoing detail findings, discussion on the key findings and subsequent conclusions, a number of recommendations have been offered. It is suggested that the offered recommendations are prioritized before going into action. Some recommendations have policy implication and so those should be dealt with cautiously with inclusion of strong policy advocacy strategy in the process. Following recommendations are being offered: •
Clear and self-explanatory Standard Operating Procedure to be imposed immediately for the Cybercrime Unit;
•
A comprehensive induction program should be developed for all the concerns of ICT and implement it as pilot basis;
•
A separate Cybercrime Protection Act should be enacted;
•
There must be a clear operating procedure to run Cybercafé and VOIP in Bangladesh.
17
NOTES
1
Cyber- combining form (in nouns and adjectives) connected with electronic communication networks especially the internet.
2
Kind of shop/outlet in where customer can use internet by paid.
20
BIBLIOGRAPHY
1. The Penal Code, 1860 (Act No. XLV of 1860) 2. The Information and Communication Technology Act, 2006 3. Report on Regional Cybercrime Seminar, Dhaka (2007) 4. Boham and Haley (2002) 5. Kumar Vinod – Winning the Battle against Cyber Crime 6. Kapoor G.V. - Byte by Byte 7. Mehta Dewang- Role of Police In Tackling Internet Crimes 8. Duggal Pawan – The Internet: Legal Dimensions 9. Monjur Kader: Criminology (Cybercrime)
Related Documents g842
Cybercrime And Its Impact In Bangladesh 30172i
December 2019 25
Wto And Its Impact 6e3a5a
November 2019 44
E-purjee And Its Implementation In Bangladesh 5d392l
November 2021 0
Fdi And Its Impact In Indian Economy 1fp5j
March 2021 0
1857 Revolt And Its Impact 692g5k
December 2019 50