Global Laws
Alexey Vladimirovich Ivanov, a twenty-something computer geek from Chelyabinsk, Russia, in the Ural Mountains, earned his living hacking the computer networks of American companies. After breaking into a firm’s servers, he would contact it on behalf of “The Expert Group of Protection Against Hackers” and demand thousands of dollars in exchange for tips on how to plug its security holes. One Connecticut company that initially refused to pay received this e-mail from Ivanov:… now imagine please Somebody hack you network (and not notify you about this), he download Atomic software with more then 300 merchants, transfer money, and after this did ‘rm -rf/’ [a Unix command that deletes directories] and after this you company be ruined. I don’t want this, and because this i notify you about possible hack in you network, if you want you can hire me and im allways be check security in you network. What you think about this?... If a firm did not comply with his unsubtle threats, Ivanov would delete its computer files or post its customers’ credit card information on the Web. Not surprisingly, most firms gave in to the extortion. When FBI officials became aware of Ivanov’s scams, they sought help from the Russian police. But as Brendan Koerner explained, “The Russian interior ministry’s ‘Department R,’ which fights cybercrime, can barely keep up with the kontoras in St. Petersburg and Moscow, much less police a distant outpost like Chelyabinsk.” So the FBI took matters into its own hands. Under the guise of a fictional American Internet security firm called “Invita,” the FBI invited Ivanov to the United States to audition for a job identifying flaws in the networks of potential Invita clients. When Ivanov arrived, undercover agents asked him to prove his ability to break into computer networks. Unbeknownst to Ivanov, the FBI was using a “sniffer” keystroke recording program to learn the usernames and passwords for his computers in Russia. After the audition, the FBI arrested Ivanov and, using his usernames and passwords, downloaded incriminating information from his computer in Russia—information later used to convict him.