Rio Olympics expected to be a cybercrime bonanza

Like all too many Brazilians, Graziela di Giorgio clicked where she shouldn't have.And just like that, her credit card was cloned.

"Many problems," she says. She points to her screen. Nestled between emails from her niece are more fishy messages.

"Bank," she says, "mostly bank scams." She clicks on a button that will report the email as a phishing attempt. But with the volume of scams she receives, she's not convinced it's helping.

• Rio Olympics looking for new security commander
• Rio Olympics ticket scalping starts in Brazil

At this internet cafein Copacabana,the cybercriminals aren't always off in cyberspace. The owner,Jaime Quadros, says they'll often come in and sit for hours.

"They're listening to people's conversations," Quadros says, "trying to get as much information as they can."

When you think cybercrime,you probably think ofRussia, or maybe China.But when it comes to banking scams and phishing, according to a recent report by the cybersecurity companyKaspersky Lab, Brazil ranks No.1.

"Brazil is one of the biggest sources of all kinds of financial malware, which is basically designed to steal credit card information, accounts and other information which is directly related to money," says Dmitry Bestuzhev of Kaspersky.

He saysBrazilians love email. And theylove to share, which makes life easy forcybercriminals.

"For Brazil, everything starts with the email," Bestuzhevsays. "They love email as the main threat, so they prepare messages, like all kind of messages. Fake messages, of course, from the traffic tickets, nude pictures, failed payments, anythingWorld Cup, Olympic Games and they send that messages along with the malicious attachments."

Another common Brazilian scam is the banco boleto.

"It's like a phishing scam," says Nathan Thompson, who studies cybercrime for Brazil's Igarape Institute. "And instead of paying your phone bill you're paying somebody else."

Installing illegal readers in bank machines? That's old school. Bestuszhev says Brazilian criminals often install a whole fake machine on top of a real one.

"So everything is fake," Bestuszhev says. "The keypad is fake, the reader, the screen is just like a glass so you can see the real ATM. Very scary, no chance basically to check if that ATM is real or not."

Many Brazilian cybercriminals are so brazen, they boast about their exploits, posing as 21st-century Robin Hoods.

"They don't have shame," Bestuszhev says. "They want to have a public presence. They build public profiles on Twitter, Facebook, YouTube, they upload even videos showing their cars, guns, their lifestyle, and they basically are just saying, 'What can you do with me?'"

That's because Brazilian cybercrime laws are notoriouslylax.

"Criminals are doing their own cost-benefit analysis and saying, 'Even if I get caught, chances that I'm going to serve a lot of time for this are not great,'" Thompson says.

Even those whose task it is to chase these criminals agree.

"You'll hardly go to prison in Brazil,"saysthe head ofRio's anti-cybercrimepolice unit,AlessandroThiers.

"The criminal knows that the profit will be great, the logistics is very small from a home computer you can scam several peopleand in the end the crime is worth it. You have the profitwithout the burden."

Thiers says theunit itself won't be beefed up, but it willtrain more copsto handlecybercrimein time for the Olympics, set for Aug. 5 to 21.

In 2014, the year Brazil held the World Cup, Thompson says reported cases ofcybercrime nearly tripled.

With even more international tourists to prey on atthe Olympics, experts say, will be even worse.

"We will see new campaigns, malicious campaigns attacking people in Brazil and outside Brazil who are actually going to visit the Olympic Games,"Bestuszhevsays.

Thompson says,"I would say people need to be aware of that coming here."