Feeds

How an app called WarmTouch nailed a grenade-stockpiling cyber extortionist

Software that knows if you're mad - or a loner

Providing a secure and efficient Helpdesk

When the president of a prestigious patent and trademarking firm began receiving emails threatening to bring down its operations unless he paid a $17m ransom, he knew he had to take action. He reported the incident to the Federal Bureau of Investigation, but agents were unable to identify the culprit.

So he retained the services of Stroz Friedberg, a private investigations firm that used a ground-breaking piece of software that helped zero in on the suspect by closely analyzing his emails. By applying an algorithm that analyzes the word choice and other characteristics of his writing, the program helped analyst Eric Shaw develop a hypothesis that the suspect was a technically adept man older than 30 who had trouble fitting in at work and in social situations. Building off those findings, Shaw later surmised that he might also own a stockpile of weapons.

The profile was remarkably accurate. Myron Tereshchuk, the man who pleaded guilty to criminal extortion in the case, was 43 years-old, and when police raided his suburban home in Maryland, they found ingredients for the deadly poison ricin and a stockpile of parts for making improvised grenades. He had applied for a job with the firm, known as MicroPatent, but had been turned down.

Tereshchuk was brought down with the help of a software application known as WarmTouch, which was developed by Shaw, a clinical psychologist who got his start profiling terrorists and foreign leaders for the Central Intelligence Agency. Its job is to sift through written communications to arrive at a profile of the author that helps bring the suspect alive in the minds of investigators and potential witnesses. That, in turn, enables them to apply the profile to a list of known suspects to see if there is a match.

WarmTouch uses a scoring system to guess at a suspect's psychological characteristics. An overuse of the word "me," for instance, might suggest an exaggerated sense of passivity, an indication the person may feel like a victim. The program can sniff out other clues about the individual, such as whether he is more of a loner (as evidenced by frequent use of the word "I") or more of a team player (indicated by using "we" instead). The program also pays close attention to rhetorical questions, which are said to be a strong indicator of anger.

WarmTouch, which Shaw discussed during last week's CanSecWest conference in Vancouver, is particularly useful in cases like the one involving MicroPatent, where the suspect is believed to be an insider.

"They feel provoked," Shaw said in an interview. "They feel victimized. It's like they're going down a corridor and their options get narrower and narrower and narrower and they feel they have no choice because of what's being done to them."

Beginner's guide to SSL certificates

More from The Register

next story
Facebook, Apple: LADIES! Why not FREEZE your EGGS? It's on the company!
No biological clockwatching when you work in Silicon Valley
Doctor Who's Flatline: Cool monsters, yes, but utterly limp subplots
We know what the Doctor does, stop going on about it already
'Cowardly, venomous trolls' threatened with TWO-YEAR sentences for menacing posts
UK government: 'Taking a stand against a baying cyber-mob'
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
Arab States make play for greater government control of the internet
Nerds told to get lost in last-minute power grab bid at UN meeting
Zippy one-liners, broken promises: Doctor Who on the Orient Express
Series finally hits stride, but Clara's U-turn is baffling
Don't bother telling people if you lose their data, say Euro bods
You read that right – with the proviso that it's encrypted
Apple SILENCES Bose, YANKS headphones from stores
The, er, Beats go on after noise-cancelling spat
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.