Citadel Malware Delivers Reveton Ransomware in Attempts to Extort Money

The IC3 has been made aware of a new Citadel malware platform used to deliver ransomware, named Reveton. The ransomware lures the victim to a drive-by download website, at which time the ransomware is installed on the user's computer. Once installed, the computer freezes and a screen is displayed warning the user they have violated United States Federal Law. The message further declares the user's IP address was identified by the Computer Crime & Intellectual Property Section as visiting child pornography and other illegal content.

To unlock their computer the user is instructed to pay a $100 fine to the US Department of Justice, using prepaid money card services. The geographic location of the user's IP address determines what payment services are offered. In addition to the ransomware, the Citadel malware continues to operate on the compromised computer and can be used to commit online banking and credit card fraud. Below is a screenshot of the warning screen.

This is an attempt to extort money with the additional possibility of the victim’s computer being used to participate in online bank fraud. If you have received this or something similar do not follow payment instructions.

It is suggested that you;

 •Contact your banking institutions.

 •File a compaint at www.IC3.gov.

Six Hackers in the United States and Abroad Charged for Crimes Affecting Over One Million Victims

Four Principal Members of “Anonymous” and “LulzSec” Charged with Computer Hacking and Fifth Member Pleads Guilty; “AntiSec” Member also Charged with Stealing Confidential Information from Approximately 860,000 Clients and Subscribers of Stratfor

Five computer hackers in the United States and abroad were charged today, and a sixth pled guilty, for computer hacking and other crimes. The six hackers identified themselves as aligned with the group Anonymous, which is a loose confederation of computer hackers and others, and/or offshoot groups related to Anonymous, including “Internet Feds,” “LulzSec,” and “AntiSec.”

RYAN ACKROYD, a/k/a “kayla,” a/k/a “lol,” a/k/a “lolspoon”; JAKE DAVIS, a/k/a “topiary,” a/k/a “atopiary”; DARREN MARTYN, a/k/a “pwnsauce,” a/k/a “raepsauce,” a/k/a “networkkitten”; and DONNCHA O’CEARRBHAIL, a/k/a “palladium,” who identified themselves as members of Anonymous, Internet Feds, and/or LulzSec, were charged in an indictment unsealed today in Manhattan federal court with computer hacking conspiracy involving the hacks of Fox Broadcasting Company, Sony Pictures Entertainment, and the Public Broadcasting Service (“PBS”). O’CEARRBHAIL is also charged in a separate criminal complaint with intentionally disclosing an unlawfully intercepted wire communication.

HECTOR XAVIER MONSEGUR, a/k/a “Sabu,” a/k/a “Xavier DeLeon,” a/k/a “Leon,” who also identified himself as a member of Anonymous, Internet Feds, and LulzSec, pled guilty on August 15, 2011 in U.S. District Court to a 12-count information charging him with computer hacking conspiracies and other crimes. MONSEGUR’S information and guilty plea were unsealed today. The crimes to which MONSEGUR pled guilty include computer hacking conspiracy charges initially filed in the Southern District of New York. He also pled guilty to the following charges: a substantive hacking charge initially filed by the U.S. Attorney’s Office in the Eastern District of California related to the hacks of HBGary, Inc. and HBGary Federal LLC; a substantive hacking charge initially filed by the U.S. Attorney’s Office in the Central District of California related to the hack of Sony Pictures Entertainment and Fox Broadcasting Company; a substantive hacking charge initially filed by the U.S. Attorney’s Office in the Northern District of Georgia related to the hack of Infragard Members Alliance; and a substantive hacking charge initially filed by the U.S. Attorney’s Office in the Eastern District of Virginia related to the hack of PBS, all of which were transferred to the Southern District of New York, pursuant to Rule 20 of the Federal Rules of Criminal Procedure, in coordination with the Computer Crime and Intellectual Property Section (“CCIPS”) in the Justice Department’s Criminal Division.

Late yesterday, JEREMY HAMMOND, a/k/a “Anarchaos,” a/k/a “sup_g,” a/k/a “burn,” a/k/a “yohoho,” a/k/a “POW,” a/k/a “tylerknowsthis,” a/k/a “crediblethreat,” who identified himself as a member of AntiSec, was arrested in Chicago, Illinois and charged in a criminal complaint with crimes relating to the December 2011 hack of Strategic Forecasting, Inc. (“Stratfor”), a global intelligence firm in Austin, Texas, which may have affected approximately 860,000 victims. In publicizing the Stratfor hack, members of AntiSec reaffirmed their connection to Anonymous and other related groups, including LulzSec. For example, AntiSec members published a document with links to the stolen Stratfor data titled, “Anonymous Lulzxmas rooting you proud” on a file sharing website.

The following allegations are based on the indictment, the information, the complaints, and statements made at MONSEGUR’s guilty plea:

Hacks by Anonymous, Internet Feds, and LulzSec

Since at least 2008, Anonymous has been a loose confederation of computer hackers and others. MONSEGUR and other members of Anonymous took responsibility for a number of cyber attacks between December 2010 and June 2011, including denial of service (“DoS”) attacks against the websites of Visa, MasterCard, and PayPal, as retaliation for the refusal of these companies to process donations to Wikileaks, as well as hacks or DoS attacks on foreign government computer systems.

Between December 2010 and May 2011, members of Internet Feds similarly waged a deliberate campaign of online destruction, intimidation, and criminality. Members of Internet Feds engaged in a series of cyber attacks that included breaking into computer systems, stealing confidential information, publicly disclosing stolen confidential information, hijacking victims’ e-mail and Twitter accounts, and defacing victims’ Internet websites. Specifically, ACKROYD, DAVIS, MARTYN, O’CEARRBHAIL, and MONSEGUR, as members of InternetFeds, conspired to commit computer hacks including: the hack of the website of Fine Gael, a political party in Ireland; the hack of computer systems used by security firms HBGary, Inc. and its affiliate HBGary Federal, LLC, from which Internet Feds stole confidential data pertaining to 80,000 user accounts; and the hack of computer systems used by Fox Broadcasting Company, from which Internet Feds stole confidential data relating to more than 70,000 potential contestants on “X-Factor,” a Fox television show.

In May 2011, following the publicity that they had generated as a result of their hacks, including those of Fine Gael and HBGary, ACKROYD, DAVIS, MARTYN, and MONSEGUR formed and became the principal members of a new hacking group called “Lulz Security” or “LulzSec.” Like Internet Feds, LulzSec undertook a campaign of malicious cyber assaults on the websites and computer systems of various business and governmental entities in the United States and throughout the world. Specifically, ACKROYD, DAVIS, MARTYN, and MONSEGUR, as members of LulzSec, conspired to commit computer hacks including the hacks of computer systems used by the PBS, in retaliation for what LulzSec perceived to be unfavorable news coverage in an episode of the news program “Frontline”; Sony Pictures Entertainment, in which LulzSec stole confidential data concerning approximately 100,000 users of Sony’s website; and Bethesda Softworks, a video game company based in Maryland, in which LulzSec stole confidential information for approximately 200,000 users of Bethesda’s website.

The Stratfor Hack

In December 2011, HAMMOND conspired to hack into computer systems used by Stratfor, a private firm that provides governments and others with independent geopolitical analysis. HAMMOND and his co-conspirators, as members of AntiSec, stole confidential information from those computer systems, including Stratfor employees’ e-mails as well as account information for approximately 860,000 Stratfor subscribers or clients. HAMMOND and his co-conspirators stole credit card information for approximately 60,000 credit card users and used some of the stolen data to make unauthorized charges exceeding $700,000. HAMMOND and his co-conspirators also publicly disclosed some of the confidential information they had stolen.

The Hack of International Law Enforcement

In January 2012, O’CEARRBHAIL hacked into the personal e-mail account of an officer with Ireland’s national police service, the An Garda Siochana (the “Garda”). Because the Garda officer had forwarded work e-mails to a personal account, O’CEARRBHAIL learned information about how to access a conference call that the Garda, the FBI, and other law enforcement agencies were planning to hold on January 17, 2012 regarding international investigations of Anonymous and other hacking groups. O’CEARRBHAIL then accessed and secretly recorded the January 17 international law enforcement conference call, and then disseminated the illegally-obtained recording to others.

***

MONSEGUR, 28, of New York, New York, pled guilty to three counts of computer hacking conspiracy, five counts of computer hacking, one count of computer hacking in furtherance of fraud, one count of conspiracy to commit access device fraud, one count of conspiracy to commit bank fraud, and one count of aggravated identity theft. He faces a maximum sentence of 124 years and six months in prison.

ACKROYD, 23, of Doncaster, United Kingdom; DAVIS, 29, of Lerwick, Shetland Islands, United Kingdom; and MARTYN, 25, of Galway, Ireland, each are charged with two counts of computer hacking conspiracy. Each conspiracy count carries a maximum sentence of 10 years in prison.

O’CEARRBHAIL, 19, of Birr, Ireland, is charged in the indictment with one count of computer hacking conspiracy, for which he faces 10 years in prison. He is also charged in the complaint with one count of intentionally disclosing an unlawfully intercepted wire communication, for which he faces a maximum sentence of five years in prison.

HAMMOND, 27, of Chicago, Illinois, is charged with one count of computer hacking conspiracy, one count of computer hacking, and one count of conspiracy to commit access device fraud. Each count carries a maximum sentence of 10 years in prison.

DAVIS is separately facing criminal charges in the United Kingdom, which remain pending, and ACKROYD is being interviewed today by the Police Central e-crime Unit in the United Kingdom. O’CEARRBHAIL was arrested today by the Garda.

The case is being prosecuted by the U.S. Attorney’s Office for the Southern District of New York. The investigation was initiated and led by the FBI, and its New York Cyber Crime Task Force, which is a federal, state, and local law enforcement task force combating cybercrime, with assistance from the PCeU; a unit of New Scotland Yard’s Specialist Crime Directorate, SCD6; the Garda; the Criminal Division’s CCIPS; and the U.S. Attorneys’ Offices for the Eastern District of California, the Central District of California, the Northern District of Georgia, and the Eastern District of Virginia; as well as the Criminal Division’s Office of International Affairs.

The charges contained in the indictment and complaints are merely accusations, and the defendants are presumed innocent unless and until proven guilty.

Oregon Man Convicted for Helping Thousands Steal Internet Service

WASHINGTON – A Redmond, Ore., man was convicted yesterday of seven counts of wire fraud by a federal jury in Boston, Assistant Attorney General Lanny A. Breuer of the Justice Department’s Criminal Division and U.S. Attorney Carmen Ortiz of the District of Massachusetts announced today.

Ryan Harris, 26, was the owner of TCNISO, a company that distributed products enabling users to steal Internet service.  From 2003 through 2009, Harris developed and distributed hardware and software tools that allowed his customers to modify their cable modems so that they could disguise themselves as paying subscribers and obtain Internet service without paying.  The products included a “packet sniffer,” which Harris dubbed “Coax Thief.”  “Coax Thief” surreptitiously intercepted (or “sniffed”) Internet traffic so that the user obtained the media access control addresses and configuration files of surrounding modems.  TCNISO and Harris also offered ongoing customer support, primarily through forums that it hosted on the TCNISO website, to assist customers in their cable modem hacking activities.

“Mr. Harris tried to hide behind the banner of freedom of access to the Internet, but the evidence established that he built a million dollar business helping customers steal Internet service,” said Assistant Attorney General Breuer.  

U.S. Attorney Carmen M. Ortiz said, “The Internet is an incredible resource that has transformed the way we conduct business.   Unfortunately, it has also become a breeding ground for criminals.   We will continue to prioritize the prosecution of those who wish to utilize our communication systems to conduct illegal activity and inflict harm on others.”

Each count carries a maximum prison term of 20 years and a fine of up to $250,000.  Sentencing has been scheduled for May 23, 2012, at 3 p.m. before Chief District Court Judge Mark Wolf, who presided over the trial.

The case was investigated by the Boston Field Office of the FBI and was prosecuted by Assistant U.S. Attorney Adam Bookbinder of the U.S. Attorney’s Office for the District of Massachusetts’s Cybercrimes Unit and Trial Attorney Mona Sedky from the Computer Crime and Intellectual Property Section in the Justice Department’s Criminal Division.

Internet Crime: Holiday Shopping Tips

In advance of the holiday season, the FBI reminds shoppers to beware of cyber criminals and their aggressive and creative ways to steal money and personal information. Scammers use many techniques to fool potential victims including fraudulent auction sales, reshipping merchandise purchased with a stolen credit card, sale of fraudulent or stolen gift cards through auction sites at discounted prices, and phishing e-mails advertising brand name merchandise for bargain prices or e-mails promoting the sale of merchandise that ends up being a counterfeit product.

Fraudulent Classified Ads or Auction Sales

Internet criminals post classified ads or auctions for products they do not have. If you receive an auction product from a merchant or retail store, rather than directly from the auction seller, the item may have been purchased with someone else's stolen credit card number. Contact the merchant to verify the account used to pay for the item actually belongs to you.

Shoppers should be cautious and not provide credit card numbers, bank account numbers, or other financial information directly to the seller. Fraudulent sellers will use this information to purchase items for their scheme from the provided financial account. Always use a legitimate payment service to protect purchases.

Diligently check each seller's rating and feedback along with their number of sales and the dates on which feedback was posted. Be wary of a seller with 100% positive feedback, if they have a low total number of feedback postings and all feedback was posted around the same date and time.

Gift Card Scam

The safest way to purchase gift cards is directly from the merchant or authorized retail merchant. If the merchant discovers the card you received from another source or auction was initially obtained fraudulently, the merchant will deactivate the gift card number, and it will not be honored to make purchases.

Phishing and Social Networking

Be leery of e-mails or text messages you receive indicating a problem or question regarding your financial accounts. In this scam, you are directed to follow a link or call the number provided in the message to update your account or correct the problem. The link actually directs the individual to a fraudulent Web site or message that appears legitimate; however, any personal information you provide, such as account number and personal identification number (PIN), will be stolen.

Another scam involves victims receiving an e-mail message directing the recipient to a spoofed Web site. A spoofed Web site is a fake site or copy of a real Web site that is designed to mislead the recipient into providing personal information.

Consumers are encouraged to beware of bargain e-mails advertising one day only promotions for recognized brands or Web sites. Fraudsters often use the hot items of the season to lure bargain hunters into providing credit card information. The old adage "if it seems too good to be true" is a good barometer to use to legitimize e-mails.

Black Friday has traditionally been the "biggest shopping day of the year." The Monday following Thanksgiving has more recently (2005) been labeled Cyber Monday, meaning the e-commerce industry endorses this special day to offer sales and promotions without interfering with the traditional way to shop. Scammers try to prey on Black Friday or Cyber Monday bargain hunters by advertising "one day only" promotions from recognized brands. Consumers should be on the watch for too good to be true e-mails from unrecognized Web sites.

Along with on-line shopping comes the growth of consumers utilizing social networking sites and mobile phones to satisfy their shopping needs more easily. Again, consumers are encouraged to beware of e-mails, text messages, or postings that may lead to fraudulent sites offering bargains on brand name products.

Tips

Here are some tips you can use to avoid becoming a victim of cyber fraud:

 •Do not respond to unsolicited (spam) e-mail.

 •Do not click on links contained within an unsolicited e-mail.
 •Be cautious of e-mail claiming to contain pictures in attached files, as the files may contain viruses. Only open attachments from known senders. Always run a virus scan on attachment before opening.
 •Avoid filling out forms contained in e-mail messages that ask for personal information.
 •Always compare the link in the e-mail to the web address link you are directed to and determine if they match.
 •Log on directly to the official Web site for the business identified in the e-mail, instead of "linking" to it from an unsolicited e-mail. If the e-mail appears to be from your bank, credit card issuer, or other company you deal with frequently, your statements or official correspondence from the business will provide the proper contact information.
 •Contact the actual business that supposedly sent the e-mail to verify that the e-mail is genuine.
 •If you are requested to act quickly or there is an emergency, it may be a scam. Fraudsters create a sense of urgency to get you to act impulsively.
 •If you receive a request for personal information from a business or financial institution, always look up the main contact information for the requesting company on an independent source (phone book, trusted internet directory, legitimate billing statement, etc.) and use that contact information to verify the legitimacy of the request.
 •Remember if it looks too good to be true, it probably is.

To receive the latest information about cyber scams, please go to the FBI Web site and sign up for e-mail alerts by clicking on one of the red envelopes. If you have received a scam e-mail, please notify the IC3 by filing a complaint at www.ic3.gov.

Situational Alert Regarding Charitable Contribution Schemes

In light of Hurricane Irene, the public is reminded to beware of fraudulent e-mails and websites claiming to conduct charitable relief efforts. Disasters prompt individuals with criminal intent to solicit contributions purportedly for a charitable organization or a good cause.

To learn more about avoiding online fraud, please see "Tips on Avoiding Fraudulent Charitable Contribution Schemes" at: http://www.ic3.gov/media/2011/110311.aspx.

For updates and tIps on preparing for hurricanes and other emergencies, go to Ready America at ready.gov.

Buying a Car Online?

You can buy almost anything over the Internet—including clothes, a pizza, music, a hotel room, even a car. And while most transactions are conducted lawfully and securely, there are instances when criminals insert themselves into the marketplace, hoping to trick potential victims into falling for one of their scams.

Today, the FBI’s Internet Crime Complaint Center (IC3) issued an alert about a specific type of cyber scam that targets consumers looking to buy vehicles online.

How the scam works. While there are variations, here’s a basic description: consumers find a vehicle they like—often at a below-market price—on a legitimate website. The buyer contacts the seller, usually through an e-mail address in the ad, to indicate their interest. The seller responds via e-mail, often with a hard-luck story about why they want to sell the vehicle and at such a good price.

In the e-mail, the seller asks the buyer to move the transaction to the website of another online company….for security reasons….and then offers a buyer protection plan in the name of a major Internet company (e.g., eBay). Through the new website, the buyer receives an invoice and is instructed to wire the funds for the vehicle to an account somewhere. In a new twist, sometimes the criminals pose as company representatives in a live chat to answer questions from buyers.

Once the funds are wired, the buyer may be asked by the seller to fax a receipt to show that the transaction has taken place. And then the seller and buyer agree upon a time for the delivery of the vehicle.

What actually happens: The ad the consumer sees is either completely phony or was hijacked from another website. The buyer is asked to move from a legitimate website to a spoofed website, where it’s easier for the criminal to conduct business. The buyer protection plan offered as part of the deal is bogus. And the buyer is asked to fax the seller proof of the transaction so the crooks know when the funds are available for stealing. 

And by the time buyers realize they’ve been scammed, the criminals—and the money—are long gone.

Red flags for consumers:

■Cars are advertised at too-good-to-be true prices;■Sellers want to move transactions from the original website to another site;■Sellers claim that a buyer protection program offered by a major Internet company covers an auto transaction conducted outside that company’s website;■Sellers refuse to meet in person or allow potential buyers to inspect the car ahead of time;■Sellers who say they want to sell the car because they’re in the U.S. military about to be deployed, are moving, the car belonged to someone who recently died, or a similar story;■Sellers who ask for funds to be wired ahead of time.

Number of complaints. From 2008 through 2010, IC3 has received nearly 14,000 complaints from consumers who have been victimized, or at least targeted, by these scams. Of the victims who actually lost money, the total dollar amount is staggering: nearly $44.5 million.

If you think you’ve been victimized by an online auto scam, file a complaint with IC3. Once complaints are received and analyzed, IC3 forwards them as appropriate to a local, state, or federal law enforcement agency.

Texas Man Sentenced for Hacking into Computer Servers of Local Company and NASA

MINNEAPOLIS—United States Attorneys B. Todd Jones, of the District of Minnesota, and Rod J. Rosenstein, of the District of Maryland, announced that earlier today in federal court in St. Paul, Minnesota, a 26-year-old Texas man was sentenced for hacking into computer networks at a Minnesota business and at NASA. U.S. District Court Judge Richard H. Kyle sentenced Jeremey Parker, of Houston, Texas, to 24 months in prison on one count of wire fraud. He was indicted in the District of Minnesota on October 13, 2010, and pleaded guilty on February 23, 2011.

In his plea agreement, Parker admitted that from December 23, 2008, through October 15, 2009, he hacked into the computer network of SWReg, Inc., a subsidiary of the cyber-based company Digital River, Inc., of Eden Prairie, Minnesota, in an effort to steal money. SWReg. pays independent software developers who write code. Royalties owed to those developers are accumulated at SWReg. The software developers have the ability to go online, view the royalty balances in their SWReg accounts, and, ultimately, cash out those accounts. When a particular developer cashes out an account, SWReg electronically transfers the money to the developer’s bank account, mails the developer a check, or has the developer’s PayPal account credited. Parker hacked into SWReg’s system, created the money by crediting the SWReg accounts, and then caused that money to be wire transferred to his bank account instead of the accounts of several developers. Parker stole approximately $275,000.

In addition, Parker admitted that on September 24, 2009, he hacked into two computer servers at the National Aeronautics and Space Administration’s Goddard Space Flight Center in Greenbelt, Maryland. The servers supported access to data being sent to Earth from satellites gathering oceanographic data. The servers did not have any control over the satellites themselves but, rather, allowed paying members of the scientific community to access the stream of data coming from those satellites. After a period of time, the data was freely available to anyone who wished to log onto a specific NASA website. Once the breach of its computer system was discovered, NASA spent approximately $66,400 to repair the damage. During the time the website was down for repairs, approximately 3,300 users were denied access to the oceanographic data.

Parker was not officially charged in the District of Maryland in connection with the NASA incident, but the two U.S. Attorneys agreed to have the activity treated as relevant conduct for sentencing purposes in the District of Minnesota.

The Minnesota case is the result of an investigation by the Federal Bureau of Investigation. It is being prosecuted by Assistant U.S. Attorney John Docherty. The Maryland matter was investigated by the NASA Office of Inspector General, and was handled by Assistant U.S. Attorney Bryan Foreman.

The Justice Department vigorously investigates and prosecutes cyber crimes. It created the Task Force on Intellectual Property (http://www.justice.gov/dag/iptaskforce/) to aid in combating intellectual property crimes both at home and abroad. According to the FBI’s Internet Crime Complaint Center’s annual report, the FBI received 22.3 percent more cyber crime complaints in 2009 than in 2008, and the total dollar loss from all cases referred to law enforcement ($559.7 million) was more than twice the 2008 figure ($264.4 million). The FBI and the Minnesota U.S. Attorney’s Office want to remind people to protect themselves from cyber crime. For more information, visit http://www.justice.gov/criminal/cybercrime/index.html

Just One Initiative: Internet Safety Month

Friends,

One week ago today, the Stop.Think.Connect. Campaign launched the Just One Initiative.  The Initiative aims to double the number of people involved in Stop.Think.Connect. by asking each of our "Friends" to enlist just one more person to join our effort by June 30.  We must remember that cybersecurity is a shared responsibility.  In order to better protect our fellow citizens from harm, we must collectively raise awareness about safe online practices.  Please do your part to help make America more secure by convincing your friends, family and colleagues to become a "Friend" today by visiting www.dhs.gov/stopthinkconnect.

With June being National Internet Safety Month, there is no better opportunity for you to encourage just one individual to become a "Friend" of Stop.Think.Connect.  We encourage you to read and pass along the blog included below to anyone who may be interested in joining our Campaign.  In doing so, remind your prospective recruits that securing cyberspace starts with them.

June is National Internet Safety Month

With the school year ending, many kids will spend more time online each day over the summer. According to the National Cyber Security Alliance, children and teens aged 8-18 devote an average of 7 hours and 38 minutes per day to electronic devices. If a child sleeps 8 hours a night, that means one-half the time he or she is awake is spent online.

The goals of Internet Safety Month are to raise awareness about Internet safety issues and encourage each of us to educate ourselves and our Nation’s youth how to behave responsibly when using the Internet.

Many schools and communities use this month as an educational opportunity not only for students – but for teachers and parents as well. There are steps that parents can take to help prevent cyberbullying and encourage kids to report bad behavior online. These steps start with taking the initiate to talk kids about cyber threats- creating an honest, open environment.

Below are simple tips to keep you and your kids safe online.

The Department’s Stop. Think. Connect. Campaign encourages students, parents, and teachers to remain vigilant about their daily Internet use. The Campaign’s objective is to help you become more aware of growing threats and arm you with the tools to protect yourself and your family.

Stop. Think. Connect. offers the following advice to parents to keep their children safe online:

Stop: Before you let your children use the Internet, set clear guidelines about which sites they are allowed to visit and what they should do if they see something questionable.

Think: Take a moment to be certain the path ahead is clear. Watch for warning signs that may indicate your child is using the Internet unsafely.

Connect: Enjoy the Internet with greater confidence, knowing you’ve taken the right steps to safeguard you and your family.

STOP. THINK. CONNECT. Protect yourself and help keep the web a safer place for everyone.

For more information on Stop.Think.Connect. programs and opportunities, visit www.dhs.gov/stopthinkconnect.

Best,

Tim Fraser

Director

Stop.Think.Connect. Campaign

U.S. Department of Homeland Security