CFCS CFCS Cybercrime & Digital Forensics 1 — Questions and Answers
Question 1: Which type of cyberattack involves criminals infiltrating a business email system to redirect wire transfers to fraudulent accounts?
- Business Email Compromise (BEC) (Correct answer)
- Phishing
- Ransomware
- SQL Injection
Correct answer: Business Email Compromise (BEC)
Business Email Compromise (BEC) is a sophisticated scam targeting businesses that perform wire transfers by compromising legitimate email accounts to redirect funds.
Question 2: What term describes the process of tracing the movement of illicit funds through cryptocurrency transactions?
- Chain analysis
- Blockchain forensics (Correct answer)
- Crypto auditing
- Digital tracing
Correct answer: Blockchain forensics
Blockchain forensics involves analyzing the public ledger of cryptocurrency transactions to trace the flow of funds and identify illicit activity.
Question 3: Which US agency maintains the Internet Crime Complaint Center (IC3) for reporting cybercrime?
- Secret Service
- FinCEN
- FBI (Correct answer)
- CISA
Correct answer: FBI
The FBI operates IC3, which serves as a central hub for reporting internet-facilitated criminal activity in the United States.
Question 4: What is 'ransomware-as-a-service' (RaaS) in the context of financial crime?
- A legitimate cloud security product
- A criminal business model where ransomware developers lease tools to affiliates who split ransom proceeds (Correct answer)
- A government cybercrime tracking service
- A type of cyber insurance
Correct answer: A criminal business model where ransomware developers lease tools to affiliates who split ransom proceeds
RaaS is a criminal enterprise model where malware developers provide ransomware tools to affiliates in exchange for a percentage of ransom payments, lowering barriers to cybercrime.
Question 5: When investigating cybercrime proceeds, which cryptocurrency feature most complicates asset tracing?
- High transaction fees
- Mixing/tumbling services (Correct answer)
- Slow transaction speeds
- Limited merchant acceptance
Correct answer: Mixing/tumbling services
Cryptocurrency mixing or tumbling services obscure the origin of funds by pooling and redistributing coins, making blockchain forensics significantly more difficult.
Question 6: What does the term 'smurfing' mean in the context of cyber-enabled money laundering?
- Using social media to recruit money mules
- Breaking large sums into smaller transactions to avoid detection thresholds (Correct answer)
- Hacking bank systems to create fictitious accounts
- Using encrypted messaging for criminal coordination
Correct answer: Breaking large sums into smaller transactions to avoid detection thresholds
Smurfing (structuring) involves breaking large illicit sums into smaller deposits or transfers to avoid triggering currency transaction report (CTR) thresholds.
CFCS CFCS Cybercrime & Digital Forensics 1
Which type of cyberattack involves criminals infiltrating a business email system to redirect wire transfers to fraudulent accounts?