developed by susan m. moncada, ph.d., cpa indiana state university accounting systems 1 © dr. susan...

1

Computer Fraud ChallengeDeveloped by Susan M. Moncada, Ph.D., CPA

Indiana State UniversityAccounting Systems

© Dr. Susan M. Moncada, Ph.D., CPA - Indiana State University -

2012

2

Learning Objectives In addition to having raised awareness,

students should be able to: 1. Compare and contrast a variety of

computer attack and abuse tactics.2. Explain how some social

engineering techniques are used to gain physical or logical access to computer resources.

3. Describe different types of malware used to harm computers.

© Dr. Susan M. Moncada, Ph.D., CPA - Indiana State University - 2012

3

Computer Fraud ChallengeThis game is based on the television game show Hollywood Squares.

Required: Two contestants, identified as “X” or “O”.

Player or Team #1 selects a celebrity and question.

The celebrity identifies the computer fraud described.

The contestant either agrees or disagrees with the celebrity’s answer.

A correct response earns the square. The first player to achieve three X’s or O’s in a row wins the game.


4

Playing Instructions:1. Once the game board is displayed, only

click on the following shapes:

Display a game question

or with character’s response

Display the X marker

Display the O marker

Return to the game board


Clicking on other areas will cause the game to malfunction.

Agree

Disagree

5

Playing Instructions:1. Click on a question

2. Click either agree or disagree with the celebrity’s response. A correct response earns the square.

3. Click on the to display the “X” marker.

4. Click on the to display the “O” marker.

5. First team to earn 3 markers in a row wins.

Note: Once the “O” is displayed the “X” cannot be displayed.


Agree

Disagree

Let’s Meet Our Celebrities...Samuel Sharkie

Sneaks Ratter

Identity Theftly

Debit Deville

Phonie Business

The Masked HackerW. C. Crimes

Cookie Booker

Bootleg Buccaneer

Meet our Celebrities…

Game Slide

X X X

X X X

X X X

O O

O O O

O O O

O


9

Feedback Response All Agrees

Congratulations, you’ve won the

square!


10

W.C. Crimes Agree is Incorrect

Feedback

W.C. Crimes’s answer is incorrect, the Correct Answer is:

Internet Misinformation

Congratulations, you’ve won the square!


11

W.C. Crimes Agree is Incorrect

Feedback2

W.C. Crimes’s answer is incorrect, the Correct Answer is:

Podslurping



12

W.C. Crimes Agree is correct.

Sorry, W.C. Crimes’s answer is

Correct !


13

W.C. Crimes Agree is Incorrect Feedback

Sorry, W.C. Crimes’s answer is incorrect,

the Correct Answer is:

Internet Misinformation


14

W.C. Crimes Agree is Incorrect Feedback #2

Sorry, W.C. Crimes’s answer is incorrect,


Podslurping


15

W.C. Crimes Question 1

Intentionally posting false information on a Web site about a political candidate, would be an example of this type of abuse?

Agree Disagree

Slandering


16


DisagreeAgree


Wearing a digital audio player, this employee appeared to be listening to music, while actually using the device was being used to download unauthorized company data. Which cyber crime was this employing perpetrating?

This scheme began with the invention of the

walkman, so I believe its called walking.

17


Disagree Agree

This crime is called Click fraud.


Inflating advertising revenues by hiring individuals to repeatedly open the advertisements of the Web site’s online advertisers.

18

Cookie Booker Agree is correct.

Sorry, Cookie Booker’s answer is

Correct


19

Feedback Response – Cookie Booker Disagree

Cookie Booker’s answer is incorrect, the correct answer is….

Packet Sniffers


20

Cookie Booker Question 3 Incorrect

Feedback

Cookie Booker’s answer is incorrect, the Correct Answer

is:

Packet Sniffers



21

Cookie Booker Question 1

Napster, a peer-to-peer file sharing service was found guilty of this cyber fraud.

Disagree Agree

The unauthorized sharing of copyrighted music is a form of software piracy.


22


In 2010, U.S. citizens received fraudulent electronic messages from an organization that purported to be the IRS. The message indicated the recipients’ EFT tax payment was not received and asked them to send confidential information.

Disagree Agree

Email Spoofing


23


In 2007, three individuals hacked into the cash registers of a New York restaurant chain. They installed this type of software that located readible “Track 2” data from credit and debit cards as it was sent over the company’s network to headquarters for processing.

Agree Disagree

Rootkit


24

Feedback Response – Phonie Business 1

Phonie Business’s answer is incorrect,the correct answer is….

Viruses


25

Phonie Incorrect Feedback Q1Viruses


Phonie Business’s answer is incorrect, the correct answer is:


26

Phonie Agree is correct.

Sorry, Phonie

Business’s answer

is Correct!


27

Phonie Business Question 1

Phonie,Oprah Winfrey and George Bush are

two of these?

Agree Disagree

Enigmas


28


On March 29, 2010, ABC News reported that several Massachusetts teenagers were criminally charged for sending text messages and using Facebook to persistently taunt a 15 year old classmate who committed suicide. What is this activity called?

Disagree Agree

Cyber-bullying

Dr. Susan M. Moncada, Ph.D., CPA - Indiana State University - 2012


29


What are techniques used to trick people into disclosing confidential information called?

Disagree Agree

Social Engineering


30

Sharkies Agree is correct.

Sorry, Sharkie’s answer

is Correct


31

Feedback Response – Sharkies 3

Sharkie’s answer is incorrect, the correct

answer is….

Dictionary Attack


32

Sharkies Incorrect Feedback Q3

Dictionary Attack


Sharkie’s answer is Incorrect, the Correct Answer is:


33

Sharkies Question 1

Fraudsters bought a significant number of shares of penny stock and used the Internet to spread overly optimistic, false information about the company to create a buying frenzy to drive up the stock price. The fraudsters then sold their stock at a profit.

Disagree Agree

Internet Pump and Dump


34

Sharkies Question 2

Sam, what is the name given to a computer fraud where products are offered for sale by someone pretending to run a legitimate E-business, and customer information is collected with no intent to deliver the product?

Disagree Agree

Posing


35

Sharkies Question 3

A spammer doing this sends out millions of e-mails to randomly generated addresses using combinations of letters added to known domain names in the hopes of reaching a percentage of actual email accounts.

Agree Disagree

War dialing


36

Debit Deville’s Disagree 2

Sorry, Debit Deville’s answer is incorrect, the correct answer is….

Tabnapping


37

Debit Deville’s Disagree 3

Sorry, Debit Deville’s answer is incorrect, the correct answer is….

Steganography


38

Deville’s Incorrect Feedback

Tabnapping


Debit Deville’s answer is incorrect, the Correct Answer is:


39

Deville’s Incorrect Feedback 2 Steganography


Debit Deville’s answer is incorrect, the Correct Answer is:


40

Debit Deville Agree is correct.

Sorry,Debit Deville’s answer

is Correct!


41

Debit Deville Question 1

A nonprofit executive changed the salary figures listed on the entity’s Form 990 just prior to transmitting it electronically to the IRS. The executive wanted to avoid incurring excessive compensation penalties.

Disagree Agree

Data Diddling


42


Citi Bank was a victim of this computer fraud. Using Javascript, customers’ Citi Bank browser tabs were changed. When the customers clicked on the tab to log back into their Citi Bank account, they were actually providing confidential information to the perpetrators.

Agree Disagree

Superzapping


43


In order to secretly communicate with each other, terrorists hid secret code in seemingly legitimate online job advertisements.

Disagree Agree

Crypto-Ads


44

Sneaks Ratter Agree is correct.

Sorry,Sneaks Ratter’s

answer is Correct!


45

Sneaks Ratter Incorrect Feedback Q2

Dumpster Diving (also called Scavenging)


Sneaks Ratter’s answer is Incorrect, the Correct Answer is:


46

Sneaks Ratter’s Disagree 2

Sorry, Sneaks Ratter’s answer is incorrect, the correct answer is….

Dumpster Diving(also called Scavenging)


47

Sneaks Ratter Question 1

According to a SEC complaint filed in San Francisco, Igors Nagaicevs broke into online brokerage accounts at large U.S. broker-dealers. He manipulated stock prices by making unauthorized trades in the customers’ accounts. What is gaining control of the customer accounts called?

Disagree Agree

Hijacking


48


In 2010, William T. Frelix and 11 others were indicted for using hotel customers’ identities and credit cards to purchase $100,000 in goods and services. The confidential information was obtained by fishing through hotel trash bins.

Agree Disagree

Foraging


49


A modified payroll program increased the federal withholding amounts by a few cents per pay period for hundreds of employees. The excess payments were credited to the perpetrator's withholding account, which, at income-tax time the following year, yielded large refunds from the IRS.

Disagree Agree

Salami Technique


50

Bootleg’s Disagree 2

Sorry, Bootleg’s answer is incorrect, the correct answer is….

Phishing


51

Bootleg Incorrect Feedback Q2

Phishing


Bootleg’s answer is Incorrect, the Correct

Answer is:


52

Bootleg Agree is correct.

Sorry, Bootleg’s answer

is Correct


53

Bootleg Question 1

Fraudsters tampered with Aldi’s debit card readers by planting a small device that recorded transaction data in order to steal confidential information. Bootleg, what type of fraud was perpetrated?

Agree Disagree

Chipping


54

Bootleg Question 2

Bootleg, what is another term for Web-page spoofing?

Agree Disagree

Trawling


55

Bootleg Question 3

A computer engineer watched the keystrokes entered by a system administrator log onto the company ERP. The programmer later logged into the company’s HR system to see the salaries of his colleagues. What is the engineer guilty of doing?

Disagree Agree

Shoulder Surfing


56

Identity Theftly’s Disagree 3

Sorry, Identity Theftly’s answer is incorrect, the correct answer is….

Carding


57

Identity Theftly Agree is correct.

Sorry, Identity Theftly’s answer

is Correct


58

Identity Theftly Incorrect Feedback Q3Carding


Identity Theftly’s answer is Incorrect, the Correct Answer is:


59

Identity Theftly Question 1

When someone uses a neighbor’s unsecure WiFi network without permission, in order to gain free access to the Internet, what is occurring?

Disagree Agree

Piggybacking


60


A waiter double swiped customers’ credit cards using the restaurant’s card reader and another reader personally owned. The victims’ stolen credit cards were used to then purchase merchandise.

Agree Disagree

Skimming


61


This computer fraud involves making purchases for immaterial amounts on stolen credit card sin order to determine which stolen card scan still be used to make purchases. Accounts still good are sold to others.

Agree Disagree

Pharming


62

The Masked Hacker Question 1

BackOrifice, Netbus, and SubSeven are examples of what type of malware?

Agree Disagree

Worms


63

The Masked Hacker Question 2

What are fraud perpetrators doing when, through repeated attempts to logon, they guess the access codes of a legitimate users?

Disagree Agree

Password Cracking


64

The Masked Hacker

Question 3

In 2008, the Facebook Jobs web page was subjected to this type of attack when code inserted to the web page created a phony login screen tricking users into handing over their credentials.

Agree Disagree

HTML Spoofing


65

The Masked Hacker Agree is correct.Sorry, The

Masked Hacker’s answer

is Correct!


66

The Masked Hacker’s Disagree 1

Sorry, The Masked Hacker’s answer is incorrect, the correct answer is….

Trap or Back Door


67

The Masked Hacker’s Disagree 3

Sorry, The Masked Hacker’s answer is incorrect, the correct answer is….

Cross-Site Scripting


68

The Masked Hacker Incorrect Feedback Q1

Trap or Back Door


The Masked Hacker’s answer is Incorrect,



69

The Masked Hacker Incorrect Feedback Q3Cross-Site

Scripting


The Masked Hacker’s answer is Incorrect,


developed by susan m. moncada, ph.d., cpa indiana state university accounting systems 1 © dr. susan...

Documents

cpa indiana state university

game question

crimes question

cookie booker question

x marker

game slide

game boarddr

cyber fraud