We have been warned by CERT and by many experts in the field, who have repeatedly warned that exploitation of known vulnerabilities is one of the biggest problems. Since the FBI began tracking these cracking incidents, investigators have identified 40 U.S. companies that have fallen victim to these groups, who usually demand compensation for patching the security holes and the safe return of stolen data. Investigators say the groups' modus operendi is to compromise a system, steal information and then contact the victim. The groups have made thinly veiled extortion threats offering protection to their victims from other hackers. The messages become more threatening if the victim doesn't cooperate, investigators say.
Officials also believe the crackers are selling credit card information to organized crime groups.
While this isn't the first time the FBI and NIPC have issued warning about computer crimes and threats, observers say the advisory goes beyond any previous communiqu . Some say the candor of the investigators' statement shows that the government realizes it needs to encourage the private sector to take preventive measures against hackers. Law enforcement is awakening to the notion that it has to work with industry in investigating and battling cybercrime. Instead, it will only facilitate the sale and leave the payment arrangements to the parties involved. By the time the company was back online three days later, customers' street addresses, phone numbers and credit card information had been removed from its database.