Cyber Cell: Cybercrime Fighting Division in Kuwait

From the Arab Times:

KUWAIT CITY: The blogger who posted comments insulting HH the Amir on the website hosted by journalist Basher Al Sayegh was tracked down by the ‘Cyber Cell’ of the IT division in the Ministry of Interior, using the blogger’s unique IP address, said a ministry source talking to the Arab Times Wednesday. “The unique IP address guides cyber detectives first to the server through which an Internet user enters a site, and all the way to the end PC.”

Al Sayegh was able to provide the IP address of the blogger to the Cyber Cell, because his site was designed to log the unique IP address of users visiting the site. “Had the blogger used Tor, which routes Internet traffic through an ‘overlay network’ that hides IP addresses, then it would have been difficult to find him out.” The Cyber Cell, the source added, monitors Internet activities and interferes when there are complaints about sites. “The cell also issues orders to Internet service providers in the state to block sites considered to have objectionable contents.””

So…they’ve got cyber detectives in Kuwait. How interesting. Makes it easier for us to realize the fact that these gumshoes don’t know how easy it is to spoof your IP or the MAC address of the PC.

I admit, I spoof a lot. Free tools for these can be found online too. As for Tor/Vidalia, it’s quite good especially for covering your cyber-prints online. But then again, Tor can’t be used successfully on it’s own. Here are a few free tips for everyone:

1- Spoof your MAC address.

2- Then use any of the public hotspots around Kuwait.

3- Wreak havoc.

Simple isn’t it? A message to the flatfooted ‘cyber detectives’:

Your E-Council certification or GIAC won’t help you much. Been there, done that. You all just don’t realize the potential number of true crackers in this country. In reality, it’s much easier to go fixing the MoI’s vulnerabilities rather than trying to track down the countless incidents that are occurring on the net on a daily basis. Like now for instance. :)

Remember the Central Bank of Kuwait fiasco? Along with a bunch of undeclared fiascoes that are going on? :)

~ by Я on August 23, 2007.

9 Responses to “Cyber Cell: Cybercrime Fighting Division in Kuwait”

  1. *Plans on wreaking havoc with a spoofed MOI ip range*

    I really should stop thinking out loud.

  2. I suggest that MOI’s cybers should start cybering in IRC ..LOL

  3. It’s funny how advanced they make it sound, when all they do is get the IP address and ask ISPs to see who logged on at that time. They just send e-mails.

    I guess I better close up my hotspot :( Seems pretty easy to frame people now.

  4. But the cyberdummies, like me, will be like sheep to the wolves with all you cyber bandits running amok!

  5. You know something, as smart as you may think it seems… ur mac address is irrelevant here.. and even if u do spoof ur ip, there is still a very easy way to catch you. I would imagine the cyber cell or whatever the unit is called, are experienced and trained well enough to understand the different methods that people use. there is only one method that i can think about that stops them, but im not gonna discuss it

  6. K: lol

    jay: maybe that’s where some of them gained their ‘experience’

    bojacob: actually in a lot of cases it’s quite hard

    intlxpatr: We’ll keep you safe ;)

    Adam: The only safest way NOT to be caught is to unplug your computer and use it offline. And still a person can get busted for doing illegal stuff.

    I know there are several methods, heck there’s thousands of methods. Computer cybercrime & forensics is a huge, dynamic field that it’s quite hard to catch up with the crackers.

    There is no true professional. Ask the NSA about that.

  7. One way .. ? Anybody can ‘anonymize’ themselves, just use Tor (the onion router) .. its almost impossible for ‘cybercells’ to track the millions routes it uses to transfer encrypted data.

  8. wa menkom nastafeed yal geeks!

  9. How is it quite hard? If they logged an IP in Kuwait, then you’re pretty much done. The only cases that are hard are when the user actually has a clue about how to protect himself. If he does it right, though, he’s pretty much untraceable.

    To Adam:
    Like K says, Tor or Freenet will do the trick. Heck, a proxy server in Guatamala will suffice. Cybercells can be trained for all I care, you simply can’t go against logic. In these cases, logic will win for a long time yet.

Leave a Reply