Author: Klevis Paloka
In December 2020, Albania adopted the National Strategy for Cyber Security and the action plan for the next 5 years.
" Albania, like other countries, is in many cases a victim of malicious cyber activity, carried out by criminal actors, including state and non-state actors, who can use network infrastructure in Albania and abroad, " the approved National Strategy states.
The adoption of such a strategy was also a request of the European Commission, which in the progress report of October 2020, stated that Albania lacks an anti-cybercrime strategy.
“ Albania has not yet adopted a cybercrime strategy and needs to create a more effective law enforcement response that focuses on the detection, traceability and prosecution of cybercriminals ,” the report states.
Meanwhile, in this drafted document that the ACQJ has at its disposal, it is emphasized that " it is currently noted that the necessary means are lacking to obtain and create cyber intelligence, using the human and logistical resources necessary to exercise law enforcement activity ." One of the challenges suggested below is related to increasing capacities to cope with technology, but also to the requirement to change the composition of the structure, their approach, technical and logistical capacity.
But despite this, the capacities of one of the institutions that deal with the investigation of virtual crime still remain modest.
An unofficial source of ACQJ, says anonymously that although a Unit called "C" has been set up and focuses on the fight against cybercrime, it has only 15 employees. This unit was actually introduced only in September 2020, when it was renamed as a structure.
But what are the most common cybercrimes?
Common forms of cybercrime prevalent in Albania include fraud related to Internet banking, such as phishing and spam.
The most recent case discovered by the police sent two people into custody and put 5 others under investigation. These citizens inside and outside the country have used bank card data which are suspected to have been stolen from different citizens outside the territory of the Republic of Albania, with the aim of benefiting financially by purchasing mobile phone equipment. Unit "C" discovered that a financial damage of about 33.000.000 ALL had been caused in a company.
The explosion of the phenomenon of cybercrimes is also reflected through statistics by the General Prosecutor's Office. In the annual report for 2020, 156 files are declared open and placed under investigation, but in only 6 cases cyber fraudsters, threats or fines have ended up in handcuffs. The trend shows lower figures for 2019, where the report of the central prosecution body shows that during this year 115 criminal proceedings were registered in this area of criminality. The same report mentions that the "hacking" has also included internationals in the investigations, which in many cases has been processed through letter orders.
" Germany, Romania, the United Kingdom and the USA have sent 4 letters of request for cybercrime criminal offenses. While our Prosecution has sent 47 letters of request (or 7.5% of the total letters of request) to countries such as: China, Germany, the USA, Great Britain, the Netherlands and Poland for the commission of cybercrime criminal offenses ," the Prosecutor General emphasizes in the crime report.
Ping pong with the investigation
The police tell ACQJ that on average every day, 5 to 8 citizens ask for help at the police stations, for the misuse of data on social platforms, starting from threats on Instagram, Facebook, attacks on WhatsApp to the most sophisticated forms of piracy.
" Two parents requested an investigation into the online bullying of their son, who, after taking a picture of him, was attacked on Instagram ," says the expert from Unit C, who indicates that after examining the page, the account was blocked. " The offenders were minors and thus it was impossible to prosecute them ," emphasizes the ACQJ official, according to whom this is the easiest case to solve.
So it is difficult to say an exact number of monthly reports, according to a source of ACQJ, the increase of denunciations in the last two months is in the figures of 1000%. This situation has been influenced by the restriction of movements by Covid-19 which, according to the police expert, further impacted a closer relationship with technology and virtual communication.
But internal sources close to the police say that the police with the capacities they currently have find it impossible to detect every case in the face of the daily flow, especially since the cases that are sent to the prosecutor's office are returned again to be completed.
" The problem lies in the evidence, so how much power do you have to evidence, but normally when you have few actors to do their evidence, there will be few with the number of those who denounce and the more cases you send to the Prosecutor's Office, the more work will be assigned, since the Prosecutor's Office will return the cases for additional information. Meanwhile, you also have to deal with new denunciations or with detecting fraud that may circulate on the internet. You also have to deal with training because new practices always emerge and with these capacities it is impossible to fight it ," the police specialist tells ACQJ.
" It has definitely increased during the pandemic. While we are making a big mistake if we continue to say only in a certain field, since there is cybercrime in all fields and none can be singled out ," concludes the ACQJ source.
Among those injured in the network is Matias Ndini, who runs a film studio. Trying to make work addresses on social networks spread and known everywhere, the 24-year-old found himself in front of an unfavorable situation a year ago.
" Since I have a film studio and advertising on social networks has now become necessary, I decided to request Instagram to make my addresses verifiable with my studio addresses and after a day I received a message from Instagram that I had to send my data by filling out a form and all the other data that was needed and since I definitely wanted to do it, I didn't think twice and sent them the data. Then I received a response that you would be notified within 48 hours. 1 week passed and I wasn't getting any notifications, I tried to log in to my Facebook, but I found it impossible because someone else had managed to steal my data. After this happened to me, I went online to search and see in detail who the message had come from and discovered that even though it was from a real page, as soon as I clicked on that page it sent me to another page that made it possible for the other person to steal me. data ,” says Ndini.
But besides they managed to steal his data on social networks, they also took a lot of money from him. So he continues to suffer this fraud that was done to him, since now Facebook has forbidden him to advertise his work, damaging it.
" After this happened, after 2-3 days, I received a call from the bank that you had made a payment of 5 dollars at 5 in the morning, then my concern increased and I directly notified the bank to suspend any action that was taking place because someone had managed to steal my bank details. But then I discovered that the people who had taken my Facebook address had sponsored my personal page with my bank address, since I had it linked to the job I needed. They had managed to spend 150 dollars, but after numerous emails with Facebook, they returned the money to me. But this left me with consequences because for more than a year I have not been able to advertise my work, since Facebook has suspended my debit card, and for me this is a very important thing, because seeing that now technology has advanced and everything is done through social networks, this hinders me in my daily work ", says the manager of "MBN Production".
Thanks to an in-depth search on the Internet and to protect himself in the future, Matias managed to find out from which country his data was stolen.
" I managed to discover through some scammers that the people who had accessed my addresses and managed to steal my data and spend $150 from my debit card were in Nigeria ," concludes the 24-year-old, who finally has a message for young people to make sure that they do not fall prey to any fraud before carrying out any actions online.
But in addition to these scams for stealing personal data, there are also scams that are done in the search for donations for children who are sick and need money to have an operation outside of Albania. These people manage to collect money from people through a bank account.
From the data provided by the Albanian Center for Quality Journalism, this was one of the last cases detected by the Police. 3 suspects through several posts on Instagram collected significant sums through appeals for charity using the data of a child abroad.
But a surprise WhatsApp message informing the user that he has won a lottery turned out to be another form of cyber fraud. Even for this finding of "pirates", the police warned citizens to be careful.
This is also confessed by journalist Dritan Laçi, who was sent such a message on WhatsApp.
" It all started with a message on my WhatsApp number, where I was informed by a foreign number that I had been selected as the winner of the WhatsApp lottery. Of course, the amount was tempting and who wouldn't want to appropriate that amount. But in order to 'appropriate' the amount, I had to follow a series of technicalities, where I had to send the data in an email, then they sent me a bank card and a page where I had to communicate with their mail. Of course, the whole procedure had its doubts ," says Laçi.
The 40-year-old says that he followed this scam almost to the end to understand how far people go to send these messages.
" I contacted a banking specialist who explained to me why the data they had provided was not original, so starting from email, bank, mail, where the fraud had reached the point where, to make the fraud credible, they had built a page that was "fake". The whole purpose was for people who fell prey to this fraud to pay into the bank account of the person who had created this mega-fraud, an amount ranging from $180 to $300, if you wanted the MasterCard where they had deposited the money by express mail. Of course, I followed all the technicalities that were required of me to understand how far the fraud went, but I did not fall prey ", the journalist concludes his story.
But apart from these scams that aim to acquire money, the most vulnerable age group is that of minors and teenagers, who are more exposed to pornographic materials or sexual harassment, carried out through the Internet.
The national strategy sounds the alarm by emphasizing, according to a study, about 12 9-year-old school children say that their parents have no knowledge of the dangers of the unsafe Internet.
" From a study of the situation in 7 regions of the country, ascertained through awareness campaigns, which included about 12.000 children from 9-year schools, children largely confirm that their parents do not have clear information on the risks of unsafe internet use by children ," the official document acknowledges.
This disturbing fact is also confirmed by the director of the Center for the Protection of Children's Rights in Albania (CRCA), Altin Hazizaj, who adds that during the pandemic there was a high number of sites that distributed pornographic materials. As for the part of cooperation with state bodies, he describes them as long processes and not always fruitful.
" There has been a 1000% increase in pages distributing pornographic materials featuring children during the pandemic, even Albanian children. While state institutions are undertaking a long process and not always with results, as the Police do not yet have the necessary equipment to detect the servers distributing these pornographic materials. Out of the 100-200 cases we have reported to the Police, only one case has been successful ," says Hazizaj.
The problem of combating cybercrime, especially against children, is also highlighted by a report published in August 2020 by UNICEF.
According to this organization, in just one year, between 5000 and 20.000 referrals are made annually by international partners. “ From 2016 to 2018, only 12 cases were investigated and only 1 case was detected ,” the report states.
This report also emphasizes that " The methods used by law enforcement agencies in investigating crimes before the digital age are no longer sufficient and appropriate in the face of the evolution of cybercrime and continuous technological developments ."
