Interpol Chief Ronald K. Noble Has Facebook Identity Stolen


Just goes to show you can jack anyone, including one of those most powerful people in the policing world. It’s not really a technical security issue but still it shows online identity theft isn’t really difficult.

That’s one difference between Twitter and Facebook, even though Twitter is only a micro-blogging service and doesn’t really store much data about an individual it has the ability to ‘Verify’ an account and stop impostors gaining any kind of weight. Example here (aplusk) – note the Verified badge at the top of the profile.

Now I find this a little odd because Facebook doesn’t have this ability even though they store infinitely more personal information.

He’s one of the most powerful people in world policing, but on Facebook Interpol chief Ronald K. Noble is just as vulnerable to identity theft as anyone else.

At last week’s inagural Interpol Information Security Conference in Hong Kong, secretary general Noble revealed that criminals had set up two accounts impersonating him on the networking site during this summer’s high-profile global dragnet, ‘Operation Infra-Red’. The fraud was discovered only recently by Interpol’s Security Incident Response Team. “One of the impersonators was using this profile to obtain information on fugitives targeted during our recent Operation Infra Red,” Noble told delegates.

Operation Infra-Red, which took place between May and July of this year, was a global, Interpol-led operation to crack down on named criminal fugitives accused of murder, paedophilia, fraud, corruption, drug trafficking and money laundering, who had fled national jurisdictions. The operation led to 130 arrests.

It seems like the bogus accounts were used for some pretty nefarious activities such as gathering information on fugitives targeted during the recent Operation Infra-Red. As per usual, the criminals are always one step ahead and it seems like they came up with another way to fish for information.

It just goes to show what can be done when you think outside the box.

Noble is not believed to have had a professional profile on Facebook although his organisation does.

“Cybercrime is emerging as a very concrete threat. Considering the anonymity of cyberspace, it may in fact be one of the most dangerous criminal threats we will ever face,” Noble was quoted as saying.

Although Facebook itself wasn’t compromised in any way, the example cited by the Interpol head hinges on the ease with which the criminals were able to forge his identity without challenge. This is a problem both Facebook, and that other giant of social media, Twitter, have been grappling with.

Even for non-VIPs using real accounts, Facebook is a controversial place to put certain types of data. Last week, a study found that many US SMEs had suffered security problems they blamed on employee interest in the site.

It’s something that needs to be looked at but I honestly can’t think of any way Facebook themselves could address this as the platform isn’t built in a way that can prevent such bogus accounts. Plus the fact Facebook is constantly pushing for less and less privacy.

In business terms the more data they collect the more they are worth, and the more open the platform is the more users they will attract.

With the new wave of social media and all these sharing platforms it’s something that needs to be considered.

Source: Network World

Posted in: Privacy, Web Hacking

, , ,


Latest Posts:


dSploit APK Download - Hacking & Security Toolkit For Android dSploit APK Download – Hacking & Security Toolkit For Android
dSploit APK Download is a Hacking & Security Toolkit For Android which can conduct network analysis and penetration testing activities.
Scallion - GPU Based Onion Hash Generator Scallion – GPU Based Onion Hash Generator
Scallion is a GPU-driven Onion Hash Generator written in C#, it lets you create vanity GPG keys and .onion addresses (for Tor's hidden services).
WiFi-Dumper - Dump WiFi Profiles and Cleartext Passwords WiFi-Dumper – Dump WiFi Profiles and Cleartext Passwords
WiFi-Dumper is an open-source Python-based tool to dump WiFi profiles and cleartext passwords of the connected access points on a Windows machine.
truffleHog - Search Git for High Entropy Strings with Commit History truffleHog – Search Git for High Entropy Strings with Commit History
truffleHog is a Python-based tool to search Git for high entropy strings, digging deep into commit history and branches. This is effective at finding secrets accidentally committed.
AIEngine - AI-driven Network Intrusion Detection System AIEngine – AI-driven Network Intrusion Detection System
AIEngine is a next-generation interactive/programmable Python/Ruby/Java/Lua and Go AI-driven Network Intrusion Detection System engine with many capabilities.
Sooty - SOC Analyst All-In-One CLI Tool Sooty – SOC Analyst All-In-One CLI Tool
Sooty is a tool developed with the task of aiding a SOC analyst to automate parts of their workflow and speed up their process.


Comments are closed.