There are several misconceptions about the role of the police in combating cybercrime, which often leads to low reporting rates and a significant number of unreported cases. Chris Lynam, the Director General of Canada’s National Cybercrime Coordination Center, addressed this issue at the 35th FIRST Conference in Montréal. He emphasized that the police do not confiscate all data and shut down operations when a hack is reported. Instead, they take a more holistic approach to tackling cybercrime, which includes measures to prevent young people from becoming involved in illicit activities.
Lynam highlighted a recent campaign called Cookie Monster, in which 119 people were arrested across multiple countries for their involvement in the underground marketplace Genesis Market. However, he revealed that only nine of these arrests involved house searches, with the rest being conversations with individuals who were aware of their activity on Genesis. This approach aims to deter individuals from engaging in cybercrime by making them aware that they are being monitored.
Lynam also discussed the challenges of contacting victims of cyberattacks, as they often mistake the police for scammers. He cited the example of the Hive ransomware attack, where the FBI managed to decrypt the data held hostage. However, when the RCMP attempted to help the Canadian victims by providing them with the decryption keys, they encountered resistance. Lynam recommended that organizations prepare for hacks in advance and establish contact with local police forces to verify the legitimacy of any assistance offered.
The Director General emphasized the importance of teamwork in combating cybercrime. He called for collaboration between the police, private sector, and CERTs (Computer Emergency Response Teams) to effectively address the challenges posed by cybercriminals. Lynam sought direct contact with CERTs at the conference in Montréal to foster this collaborative effort.
In conclusion, Lynam emphasized the need for a comprehensive approach to combating cybercrime, dispelling misconceptions about the role of the police, and promoting teamwork between different entities to minimize the impact of cyberattacks.
