University:
University College London
Course:
LAWS0007 | Criminal Law
Academic year:

2024
Views:

492

Pages:

2
Author:

Nam B.

CASE DISCLOSURE MALWARE CASE - "MALWARE CASE WHERE THE PERPETRATORS SPREADING MALWARE (JF SNIFFER) THAT'S THREATEN PEOPLE WHO ACCESS E-COMMERCE SITES IN INDONESIA, AND EVEN THE WORLD" - A. The Alleged Article: • Article 30 Paragraph (1), Paragraph (2), Paragraph (3) Jo. 46 Paragraph (1), Paragraph (2), Paragraph (3) and/or Article 31 Paragraph (2) Jo. Article 47 and/or Article 32 Paragraph (1) and Paragraph (2) Jo. Article 48 Paragraph (1) and Paragraph (2) and / or Article 36 Jo. Article 51 Paragraph (2) of Law Number 19 of 2016 concerning Amendments to Law Number 11 of 2008 concerning Information and Electronic Transactions and/or 363 of the Criminal Code with the threat of a criminal sentence of 10 years in prison. - B. About the Case: • In 2020, 2 suspects was successfully being caught by Cybercrime Investigation Directorate of the Indonesian National Police. Night Fury Operation is one of the ASEAN Cyber Capability Desk programs designed by Interpol and in collaboration with a company engaged in cyber attack prevention, namely Group-IB. One of the operational targets that has become the focus is the spread of malware called JS Sniffer. JF Sniffer has successfully infected more than 200 e-Commerce sites in various countries, including Indonesia. JS Sniffer is an "intruder" malware designed to monitor all the information contained on the target site. The command found in this malware is 'get billing', allowing the perpetrator to get banking Information belonging to site visitors, such as credit card number, the full name of the credit card owner, credit card owner's address, PayPal account, phone number, e-mail address, and The username used for the login along with the password. - C. Modus Operandi: • The perpetrators looked for vulnerabilities in e-Commerce sites, then create "doors" that are inserted into the site so that every visitor who will access the eCommerce site will pass through the door they have prepared. Not only eCommerce sites in Indonesia, the perpetrators also managed to infiltrate many e-Commerce sites from the UK, South Africa, Australia, the Netherlands and Germany. Within a period of 1 year, the perpetrator managed to collect a number of electronic items which, if collected, could reach IDR 150 million. - D. Suspects' identity: • After going through the investigation process, the Indonesian National Police Criminal Investigation Directorate managed to secure several suspects suspected of being the perpetrators of the spread of JS Sniffer in Indonesia, namely K (35 years) and NA (25 years). - E. Evidences • Some of the evidence that was successfully secured included 1 (one) laptop, 5 (five) cellphones of various brands, 1 (one) CPU unit, 3 (three) ID cards. The suspect, 1 (one) BCA Token, 2 (two) ATM cards.