File Sharing Programs Used For Id Theft

Medea

Golden Member
Dec 5, 2000
1,606
0
0
Article is about two and a half weeks old, and it was in some newspapers but I just saw the full this evening...

http://ap.google.com/article/A...W1DL...OcNhnyXf-RjIlJA

Accusation of ID Theft by File-Sharing
By GENE JOHNSON ? 1 day ago

SEATTLE (AP) ? A Seattle man has been arrested in what the Justice Department described as its first case against someone accused of using file-sharing digital data to commit identity theft.

Gregory Thomas Kopiloff primarily used Limewire's file-sharing program to troll other people's computers for financial information, which he used to open credit cards for an online shopping spree, federal prosecutors said Thursday.

Kopiloff was arrested Wednesday at his government-subsidized apartment a few blocks from the federal courthouse here. According to a four-count indictment, he bought at least $73,000 worth of goods online ? including iPods and laptop computers ? then resold those items at half-price and kept the proceeds. Investigators said he blew through most of the money supporting a gambling habit.

Authorities said they have identified least 83 victims ? most of whom have teenage children and did not know the file-sharing software was on their computer. But investigators also said they believe the number of people affected was in the hundreds ? and that in all they lost hundreds of thousands of dollars.

Though people have been prosecuted for using networks to illegally share copyrighted music, movies and software, the Justice Department called this the first version of an equally ? if not more ? troubling matter.

Each day, computer users inadvertently share hundreds of thousands of sensitive files through such programs, from banking statements and medical records to tax returns and legal documents, according to Robert Boback, chief executive of Tiversa Inc., a Pennsylvania firm that monitors file-sharing.

Typically the mistakes occur when a user downloads file-sharing software and accidentally allows it to share all files on a computer, rather than just music files, for example.

"If you are running file-sharing software, you are giving criminals the keys to your computer," said assistant U.S. attorney Kathryn Warma. "Criminals are getting access to incredibly valuable information."

When other users might search on Limewire for "Madonna," Kopiloff would search for "federal tax return," or for student financial aid forms or other financial information, Warma said. And instead of getting access to a few hundred files containing "Like a Virgin" or "Papa Don't Preach," he would get a few hundred files containing tax returns.

He would vet his victims before opening accounts in their name, ensuring they earned at least $150,000 a year and had good credit, Warma said.

Boback showed during a news conference Thursday the searches being conducted on peer-to-peer networks at that moment.

As the searches were entered, they scrolled rapidly along the screen of his laptop. Many clearly concerned music files and pornography, but interspersed were scores looking for files that contained terms such as "password" and "medical billing."

"There are tens of thousands of individuals who make a living doing this," Boback said.

The issue has national security implications, he said. In July, his company found that more than 200 classified documents were available on peer-to-peer networks, including one that concerned troop movements in Iraq.

Boback testified before the House Oversight Committee on the issue July 24. He noted that among the files his company found was a confidential document addressed to Rep. Henry Waxman, the committee's chairman, concerning a pharmaceutical company's drug trials.

A Limewire representative could not immediately be reached for comment, but at the same congressional hearing, the chairman of Lime Wire LLC, Mark Gorton, said the company warns its users about the dangers posed by the software and instructs them on how to use it safely.

"We continue to be frustrated that despite our warnings and precautions, a small fraction of users override the safe default setting that comes with the program and end up inadvertently publishing information that they would prefer to keep privats," Gorton said.

According to the indictment, Kopiloff began using Limewire and Soulseek ? free file-sharing programs available on the Internet ? about 2 1/2 years ago to search for people who had inadvertently allowed access to their sensitive files.

Kopiloff also obtained some sensitive information the old-fashioned way, from associates who would steal mail or go "Dumpster diving" for discarded financial records, the indictment said, adding that he would open credit accounts and then go shopping online, having items shipped to a UPS store, hotels or post office boxes.

He was arrested after one of his alleged victims, a Texas resident, told his company's security officer ? a former Secret Service agent ? about how his bank account had been compromised, with someone in Western Washington passing bad checks on his account. The agent forwarded the information to Secret Service agents and police in Seattle, Warma said. Kopiloff has a lengthy history of theft and drug convictions.

Kopiloff is charged with mail fraud, accessing a protected computer, and two counts of aggravated identity theft.

Kopiloff did not enter a plea during an appearance in U.S. District Court on Thursday, and his court-appointed lawyer said she had not had time to review the charges. A detention hearing was set for Monday.