Interpol Chief Ronald K. Noble Has Facebook Identity Stolen


Just goes to show you can jack anyone, including one of those most powerful people in the policing world. It’s not really a technical security issue but still it shows online identity theft isn’t really difficult.

That’s one difference between Twitter and Facebook, even though Twitter is only a micro-blogging service and doesn’t really store much data about an individual it has the ability to ‘Verify’ an account and stop impostors gaining any kind of weight. Example here (aplusk) – note the Verified badge at the top of the profile.

Now I find this a little odd because Facebook doesn’t have this ability even though they store infinitely more personal information.

He’s one of the most powerful people in world policing, but on Facebook Interpol chief Ronald K. Noble is just as vulnerable to identity theft as anyone else.

At last week’s inagural Interpol Information Security Conference in Hong Kong, secretary general Noble revealed that criminals had set up two accounts impersonating him on the networking site during this summer’s high-profile global dragnet, ‘Operation Infra-Red’. The fraud was discovered only recently by Interpol’s Security Incident Response Team. “One of the impersonators was using this profile to obtain information on fugitives targeted during our recent Operation Infra Red,” Noble told delegates.

Operation Infra-Red, which took place between May and July of this year, was a global, Interpol-led operation to crack down on named criminal fugitives accused of murder, paedophilia, fraud, corruption, drug trafficking and money laundering, who had fled national jurisdictions. The operation led to 130 arrests.

It seems like the bogus accounts were used for some pretty nefarious activities such as gathering information on fugitives targeted during the recent Operation Infra-Red. As per usual, the criminals are always one step ahead and it seems like they came up with another way to fish for information.

It just goes to show what can be done when you think outside the box.

Noble is not believed to have had a professional profile on Facebook although his organisation does.

“Cybercrime is emerging as a very concrete threat. Considering the anonymity of cyberspace, it may in fact be one of the most dangerous criminal threats we will ever face,” Noble was quoted as saying.

Although Facebook itself wasn’t compromised in any way, the example cited by the Interpol head hinges on the ease with which the criminals were able to forge his identity without challenge. This is a problem both Facebook, and that other giant of social media, Twitter, have been grappling with.

Even for non-VIPs using real accounts, Facebook is a controversial place to put certain types of data. Last week, a study found that many US SMEs had suffered security problems they blamed on employee interest in the site.

It’s something that needs to be looked at but I honestly can’t think of any way Facebook themselves could address this as the platform isn’t built in a way that can prevent such bogus accounts. Plus the fact Facebook is constantly pushing for less and less privacy.

In business terms the more data they collect the more they are worth, and the more open the platform is the more users they will attract.

With the new wave of social media and all these sharing platforms it’s something that needs to be considered.

Source: Network World

Posted in: Privacy, Web Hacking

, , ,


Latest Posts:


tko-subs - Detect & Takeover Subdomains With Dead DNS Records tko-subs – Detect & Takeover Subdomains With Dead DNS Records
tko-subs is a tool that helps you to detect & takeover subdomains with dead DNS records, this could be dangling CNAMEs point to hosting services and more.
Arcane - Tool To Backdoor iOS Packages (iPhone ARM) Arcane – Tool To Backdoor iOS Packages (iPhone ARM)
Arcane is a simple script tool to backdoor iOS packages (iPhone ARM) and create the necessary resources for APT repositories.
SharpHose - Asynchronous Password Spraying Tool SharpHose – Asynchronous Password Spraying Tool
SharpHose is an asynchronous password spraying tool in C# for Windows environments that takes into consideration fine-grained password policies and can be run over Cobalt Strike's execute-assembly.
Axiom - Pen-Testing Server For Collecting Bug Bounties Axiom – Pen-Testing Server For Collecting Bug Bounties
Project Axiom is a set of utilities for managing a small dynamic infrastructure setup for bug bounty, basically a pen-testing server out of the box with 1-line.
Quasar RAT - Windows Remote Administration Tool Quasar RAT – Windows Remote Administration Tool
Quasar is a fast and light-weight Windows remote administration tool coded in C#. Used for user support through day-to-day administrative work to monitoring.
Pingcastle - Active Directory Security Assessment Tool Pingcastle – Active Directory Security Assessment Tool
PingCastle is a Active Directory Security Assessment Tool designed to quickly assess the Active Directory security level based on a risk and maturity framework.


Comments are closed.