Subject:	Actual data theft metrics for the insurance industry - interested in your opinion.
Date:	Sun, 12 Sep 2010 12:04:34 -0400
From:	Karim Hijazi Unveillance Email <khijazi@unveillance.com>
Reply-To:	khijazi@unveillance.com
Organization:	Unveillance, LLC
To:	Kevin Kalinich <Kevin_Kalinich@ars.aon.com>
CC:	J. Tubbs <jtubbs@unveillance.com>

Subject:

Actual data theft metrics for the insurance industry - interested in your opinion.

Date:

Sun, 12 Sep 2010 12:04:34 -0400

From:

Karim Hijazi Unveillance Email <khijazi@unveillance.com>

Reply-To:

khijazi@unveillance.com

Organization:

Unveillance, LLC

To:

Kevin Kalinich <Kevin_Kalinich@ars.aon.com>

CC:

J. Tubbs <jtubbs@unveillance.com>

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Kevin, My name is Karim Hijazi and I am one of the founders of Unveillance, LLC. We are small niche technology for-profit firm in Atlanta Georgia. I have taken the liberty of reading your incredible whitepaper, "Legal Exposures to the Maxx" as well as your email exchange with Jamey Heary of Network World back in 2008, all of which has been very helpful and informative. We set out to assess the impact of the malware/botnet organized cybercrime pandemic currently siphoning the identities, bank credentials, credit card data and proprietary/secret information of the world's organizations and governments in a completely non-invasive way. As a result, we have developed a cloud (Software as a Service - SaaS) solution that, with absolutely no hardware, software or agent (and most importantly - with no actual contact with the target organization) will ascertain the actual infection status and severity therein. The results we have come across in the last three months are absolutely astounding. The rate of infection is exponentially growing as is the severity and complexity of the theft that is being successfully executed. Further, we not only have been able to identify the actual infection type (Mariposa.A, Mariposa.B, Zeus, etc.) we now understand the vector of attack and in a many cases the actual payloads being ex-filtrated... all of this without even contacting the client. Beyond this we have developed a "score" per organization, sub-sector, sector and industry all the way up to the actual country. The score is based on the severity of infection, size and scope of the infection and duration of time it has been able to perpetuate and propagate. This allows us to color-code and assess an entity with one number; think Dun & Bradstreet or Equifax. It is an eye-opening exercise. Originally this seemed like an obvious sell to the targeted (infected) organization, but upon further examination, our metrics would seem to be a more appropriate fit with data theft insurance providers. I am obviously just scratching the surface of this but in short, we would value your opinion and thoughts on this. Should this be of any interest to you, I would very much enjoy a conversation at your convenience. Thank you in advance for your time Kevin, and I look forward to hearing from you. - -- All the best, Karim Hijazi CEO | President Unveillance, LLC O. (404) 585-7487 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJMjPoSAAoJEIk0Dw4U/G3l2HsH/3wdUgw4rfYO5W7/l2ymiQFj mSLAtq18rtJEaggHSdWjD4ivo1plgzih7KsSrDVpPUuJrpQUZinI1RmKqfblEm4t dJjSClsbO/y6cvblaY6kM9Tj8UqMXwl9KGZGNnnC3fA54UjJS+ECbwiCvIfCk46E vUJjai8biUeuM7Ge2g6LBcj6YGQjRNTwAps9aCe59n/UrkeHYpfPDWJcNcu61qkv tgoaw9hhXNsmk026TBptPaTpRLEQtkN9Fl+vfMUGK0ZEl9wqDLFW4E9rLLxRxiBN RsbPxY8LjK3PoIIYb8idSyWUrebAvwfKKVmttbKRvDJKI/8AXrxzSJP9dQzClnQ= =mxNT -----END PGP SIGNATURE-----

-- All the best, Karim Hijazi CEO | President Unveillance, LLC O. (404) 585-7487 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ********************************************

From: BMHDMH@aol.com
To: khijazi@unveillance.com
Sent: 9/10/2010= 3:18:45=20 P.M. Eastern Daylight Time
Subj: Fwd: Follow Up Documentation

Karim -

Positive response from our Earthlink contact ...plus note the comme= nt on=20 cost. Give me a call whenever, My Friend.

Bruce

From: jwphillips80@earthlink.net
To: BMHDMH@aol.com
Sent: 9/10/2= 010=20 2:21:41 P.M. Eastern Daylight Time
Subj: Re: Follow Up=20 Documentation

Bruce,

It definitely looks in= teresting. I'd like to=20 hear more about it along with the cost structure.

John=20
Sent via BlackBerry by AT&T

From: BMHDMH@aol.com

Date: Fri, 10 Sep 2010 14:04:39 EDT

To: <JWPhillips80@earthlink.net>

Subject: Follow Up Documentation

John -

As per our conversation, please find a power point attached which= =20 provides significantly more information on the Unveillance software.= I also=20 just completed a call with the developers of the product and they= are=20 very anxious to have a GotoMeeting/WebX call with you next week subjec= t to=20 your availability.

In the interim period, the Unveillance team is going to see what= data=20 has already been collected on Earthlink and what information that= =20 provides indicates in terms of any issues or problems. All of this wil= l be=20 reviewed on our call next week.

Thanks again for your time and support and I really look forward= to=20 working with you.

Best Regards,

Bruce

--part1_166c8e.50e7454b.39c21c3c_boundary-- From - Sat May 21 19:29:06 2011 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Delivered-To: khijazi@unveillance.com Received: by 10.14.119.13 with SMTP id m13cs134862eeh; Wed, 10 Nov 2010 17:23:46 -0800 (PST) Received: by 10.229.212.12 with SMTP id gq12mr193954qcb.154.1289438415373; Wed, 10 Nov 2010 17:20:15 -0800 (PST) Received-SPF: softfail (google.com: best guess record for domain of transitioning unknown does not designate as permitted sender) Received: by 10.241.83.138 with IMAP4 id 10mf239153qyk.78; Wed, 10 Nov 2010 17:20:15 -0800 (PST) X-Gmail-Fetch-Info: khijazi@unveillance.com@mail18.mydomainwebhost.com -1 mail18.mydomainwebhost.com 143 khijazi@unveillance.com Message-ID: <4C90CEBE.7020800@unveillance.com> Date: Wed, 15 Sep 2010 09:48:46 -0400 From: Karim Hijazi Unveillance Email Reply-To: khijazi@unveillance.com Organization: Unveillance, LLC User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.9) Gecko/20100825 Lightning/1.0b2 Thunderbird/3.1.3 MIME-Version: 1.0 To: Owen Greeson Subject: Re: Unveillance redirection to the insurance industry References: <4C8E553F.8030105@comcast.net> <4C907BC8.6040006@unveillance.com> <4C90802E.7010107@comcast.net> In-Reply-To: <4C90802E.7010107@comcast.net> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sleep becomes optional when I am motivated my friend! :) On 9/15/2010 4:13 AM, Owen Greeson wrote: > You keep weird hours for a person who gets up at the crack of dawn! > > On 9/15/2010 3:54 AM, Karim Hijazi Unveillance Email wrote: >> Hi Owen, >> >> Below are a few very relevant links to the data theft insurance >> industry as well as my email to Mr. Kevin Kalinich of AON. >> >> http://www.networkworld.com/community/node/26203 - A very interesting >> article about the privacy breach and data theft insurance industry. >> This is an exchange between AON's Kevin Kalinich and Network World's >> Jamey Heary. Basically, this is the article that caused my epiphany >> about the Unveillance solution's relevance to the insurance industry. >> >> http://aon.mediaroom.com/index.php?s=55&item=70 >> - A link to >> Kalinich's whitepaper. Very informative. >> >> http://www.riskandinsurance.com/brokerdetail.jsp?brokerYear=2009&storyId=13388506 >> >> - A profile of Mr. Kalinich (third one down). >> >> Lastly, I just found this tonight which could be the most perfect >> complement to our current solution - >> http://www.aon-esolutions.com/aonES/Products/RiskConsole >> >> All the best, >> >> Karim >> >> >> -------- Original Message -------- >> Subject: Actual data theft metrics for the insurance industry - >> interested in your opinion. >> Date: Sun, 12 Sep 2010 12:04:34 -0400 >> From: Karim Hijazi Unveillance Email >> Reply-To: khijazi@unveillance.com >> Organization: Unveillance, LLC >> To: Kevin Kalinich >> CC: J. Tubbs >> >> >> > Hello Kevin, > > My name is Karim Hijazi and I am one of the founders of Unveillance, > LLC. We are small niche technology for-profit firm in Atlanta Georgia. > > I have taken the liberty of reading your incredible whitepaper, "Legal > Exposures to the Maxx" as well as your email exchange with Jamey Heary > of Network World back in 2008, all of which has been very helpful and > informative. > > We set out to assess the impact of the malware/botnet organized > cybercrime pandemic currently siphoning the identities, bank > credentials, credit card data and proprietary/secret information of the > world's organizations and governments in a completely non-invasive way. > > As a result, we have developed a cloud (Software as a Service - SaaS) > solution that, with absolutely no hardware, software or agent (and most > importantly - with no actual contact with the target organization) will > ascertain the actual infection status and severity therein. The results > we have come across in the last three months are absolutely astounding. > The rate of infection is exponentially growing as is the severity and > complexity of the theft that is being successfully executed. > > Further, we not only have been able to identify the actual infection > type (Mariposa.A, Mariposa.B, Zeus, etc.) we now understand the vector > of attack and in a many cases the actual payloads being ex-filtrated... > all of this without even contacting the client. Beyond this we have > developed a "score" per organization, sub-sector, sector and industry > all the way up to the actual country. The score is based on the severity > of infection, size and scope of the infection and duration of time it > has been able to perpetuate and propagate. This allows us to color-code > and assess an entity with one number; think Dun& Bradstreet or Equifax. > It is an eye-opening exercise. > > Originally this seemed like an obvious sell to the targeted (infected) > organization, but upon further examination, our metrics would seem to be > a more appropriate fit with data theft insurance providers. > > I am obviously just scratching the surface of this but in short, we > would value your opinion and thoughts on this. Should this be of any > interest to you, I would very much enjoy a conversation at your > convenience. Thank you in advance for your time Kevin, and I look > forward to hearing from you. > > -- All the best, > > Karim Hijazi > CEO | President > Unveillance, LLC > O. (404) 585-7487 > M. (561) 542-5704 > www.unveillance.com > khijazi@unveillance.com > > ******************************************** > CONFIDENTIAL& PRIVILEGED COMMUNICATION This message is for the named > person's use only. The information contained in this communication is > confidential and/or privileged, proprietary information that is > transmitted solely for the purpose of the intended recipient(s). No > confidentiality or privilege is waived or lost by any mistransmission. > If you receive this message in error, please immediately delete it and > all copies of it from your system, destroy any hard copies of it and > notify the sender. You must not, directly or indirectly, use, disclose, > distribute, print, or copy any part of this message if you are not the > intended recipient. The sender or any of its subsidiaries each reserve > the right to monitor all e-mail communications through its networks. > ******************************************** >> >> - -- All the best, >> Karim Hijazi CEO | President Unveillance, LLC O. (404) 585-7487 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com >> ******************************************** CONFIDENTIAL& PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** - -- All the best, Karim Hijazi CEO | President Unveillance, LLC O. (404) 585-7487 M. (561) 542-5704 www.unveillance.com khijazi@unveillance.com ******************************************** CONFIDENTIAL & PRIVILEGED COMMUNICATION This message is for the named person's use only. The information contained in this communication is confidential and/or privileged, proprietary information that is transmitted solely for the purpose of the intended recipient(s). No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender or any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. ******************************************** -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJMkM6+AAoJEIk0Dw4U/G3llEMIANu03Gm4CuHZSbeECK6kMhk7 3SaxYpcSajXE0PGKiabIURxvpce6+lvGV1JK/Rw6kGG9U4QIppFFwUAgw+Nthq+K b06ht6SqU/lhKOHWCLRfr8aIE5vuQ5ehhVuc4pyTKrRolKyJ4W5R+gsxOieRYIzK wk/Z+gc2J4ABQwEODyfHHW2udxJS3fz8tqWWGnwQApNnEDT9OO/IITxQAdC5GHz0 rFHoC/tKC3FrlwWt+GcaWwQhJ7cVyCmkTWy6qTFLQZ4g4ZD+WPCsuUk47PkcVDPf 7xS9xnw2WIuNnZngl5/E2zFAplj7b0ZDFSB4DXrpb6x6zhpXTZJT60Y+akmtlAE= =llsk -----END PGP SIGNATURE-----

Praetorian Demo for Team Cymru