From Wikipedia, the free encyclopedia
  (Redirected from Computer crime)
Jump to navigation Jump to search

Cybercrime is a crime that involves a computer and a network.[1][2] The computer may have been used in the commission of a crime, or it may be the target.[3] Cybercrime may harm someone's security and financial health.[4]

There are many privacy concerns surrounding Cybercrime when confidential information is intercepted or disclosed, lawfully or otherwise. Internationally, both governmental and non-state actors engage in cybercrimes, including espionage, financial theft, and other cross-border crimes. Cybercrimes crossing international borders and involving the actions of at least one nation-state are sometimes referred to as cyberwarfare. Warren Buffet describes Cybercrime as the "number one problem with mankind"[5] and "poses real risks to humanity."[6]

A report (sponsored by McAfee) published in 2014 estimated that the annual damage to the global economy was $445 billion.[7] A 2016 report by Cybersecurity ventures predicted that global damages incurred as a result of cybercrime would cost up to $6 trillion annually by 2021 and $10.5 trillion annually by 2025.[8]

Approximately $1.5 billion was lost in 2012 to online credit and debit card fraud in the US.[9] In 2018, a study by the Center for Strategic and International Studies (CSIS), in partnership with McAfee, concludes that nearly one percent of global GDP, close to $600 billion, is lost to cybercrime each year.[10] The World Economic Forum 2020 Global Risk report confirmed that organized Cybercrimes bodies are joining forces to perpetrate criminal activities online while estimating the likelihood of their detection and prosecution to be less than 1 percent in the US.[11]


With traditional crime reducing, global communities continue to witness a sporadic growth in cybercrime.[12] Computer crime encompasses a broad range of activities.[13]

Financial fraud crimes[edit]

Computer fraud is any dishonest misrepresentation of fact intended to let another to do or refrain from doing something which causes loss. In this context, the fraud will result in obtaining a benefit by:

  • Altering in an unauthorized way. This requires little technical expertise and is a common form of theft by employees altering the data before entry or entering false data, or by entering unauthorized instructions or using unauthorized processes;
  • Altering, destroying, suppressing, or stealing output, usually to conceal unauthorized transactions. This is difficult to detect;
  • Altering or deleting stored data;[14]

Other forms of fraud may be facilitated using computer systems, including bank fraud, carding, identity theft, extortion, and theft of classified information. These types of crime often result in the loss of private information or monetary information.


Government officials and information technology security specialists have documented a significant increase in Internet problems and server scams since early 2001. There is a growing concern among government agencies such as the Federal Bureau of Investigations (FBI) and the Central Intelligence Agency (CIA) that such intrusions are part of an organized effort by cyberterrorist foreign intelligence services, or other groups to map potential security holes in critical systems.[15] A cyberterrorist is someone who intimidates or coerces a government or an organization to advance his or her political or social objectives by launching a computer-based attack against computers, networks, or the information stored on them.

Cyberterrorism, in general, can be defined as an act of terrorism committed through the use of cyberspace or computer resources (Parker 1983). As such, a simple propaganda piece on the Internet that there will be bomb attacks during the holidays can be considered cyberterrorism. There are also hacking activities directed towards individuals, families, organized by groups within networks, tending to cause fear among people, demonstrate power, collecting information relevant for ruining peoples' lives, robberies, blackmailing, etc.[16]


Cyberextortion occurs when a website, e-mail server, or computer system is subjected to or threatened with repeated denial of service or other attacks by malicious hackers. These hackers demand money in return for promising to stop the attacks and to offer "protection". According to the Federal Bureau of Investigation, cybercrime extortionists are increasingly attacking corporate websites and networks, crippling their ability to operate and demanding payments to restore their service. More than 20 cases are reported each month to the FBI and many go unreported in order to keep the victim's name out of the public domain. Perpetrators typically use a distributed denial-of-service attack.[17] However, other cyberextortion techniques exist such as doxing extortion and bug poaching.

An example of cyberextortion was the attack on Sony Pictures of 2014.[18]

Ransomware is a kind of cyberextortion in which a malware is used to restrict access to files, sometimes threatening permanent data erasure unless a ransom is paid. Kapersky Lab 2016 Security Bulletin report estimates that a business falls victim of Ransomware every 40 minutes.[19] and predicted to attack a business every 11 minutes in 2021. With Ransomware remaining one of the fastest growing cybercrimes in the world, global Ransomware damage is predicted to cost up to $20 billion in 2021.[20]

Cybersex trafficking[edit]

Cybersex trafficking is the transportation of victims and then the live streaming of coerced sexual acts and or rape on webcam.[21][22][23][24] Victims are abducted, threatened, or deceived and transferred to 'cybersex dens.'[25][26][27] The dens can be in any location where the cybersex traffickers have a computer, tablet, or phone with internet connection.[23] Perpetrators use social media networks, videoconferences, dating pages, online chat rooms, apps, dark web sites,[28] and other platforms.[29] They use online payment systems[28][30][31] and cryptocurrencies to hide their identities.[32] Millions of reports of its occurrence are sent to authorities annually.[33] New legislation and police procedures are needed to combat this type of cybercrime.[34]

An example of cybersex trafficking is the 2018–2020 Nth room case in South Korea.[35]


The U.S. Department of Defense notes that the cyberspace has emerged as a national-level concern through several recent events of geostrategic significance. Among those are included, the attack on Estonia's infrastructure in 2007, allegedly by Russian hackers. In August 2008, Russia again allegedly conducted cyber attacks, this time in a coordinated and synchronized kinetic and non-kinetic campaign against the country of Georgia. Fearing that such attacks may become the norm in future warfare among nation-states, the concept of cyberspace operations impacts and will be adapted by warfighting military commanders in the future.[36]

Computer as a target[edit]

These crimes are committed by a selected group of criminals. Unlike crimes using the computer as a tool, these crimes require the technical knowledge of the perpetrators. As such, as technology evolves, so too does the nature of the crime. These crimes are relatively new, having been in existence for only as long as computers have—which explains how unprepared society and the world, in general, is towards combating these crimes. There are numerous crimes of this nature committed daily on the internet. It is seldom committed by loners, instead it involves large syndicate groups.

Crimes that primarily target computer networks include:

Computer as a tool[edit]

When the individual is the main target of cybercrime, the computer can be considered as the tool rather than the target. These crimes generally involve less technical expertise. Human weaknesses are generally exploited. The damage dealt is largely psychological and intangible, making legal action against the variants more difficult. These are the crimes which have existed for centuries in the offline world. Scams, theft, and the likes have existed even before the development in high-tech equipment. The same criminal has simply been given a tool which increases their potential pool of victims and makes them all the harder to trace and apprehend.[37]

Crimes that use computer networks or devices to advance other ends include:

The unsolicited sending of bulk email for commercial purposes (spam) is unlawful in some jurisdictions.

Phishing is mostly propagated via email. Phishing emails may contain links to other websites that are affected by malware.[38] Or, they may contain links to fake online banking or other websites used to steal private account information.

Obscene or offensive content[edit]

The content of websites and other electronic communications may be distasteful, obscene or offensive for a variety of reasons. In some instances, these communications may be illegal.

The extent to which these communications are unlawful varies greatly between countries, and even within nations. It is a sensitive area in which the courts can become involved in arbitrating between groups with strong beliefs.

One area of Internet pornography that has been the target of the strongest efforts at curtailment is child pornography, which is illegal in most jurisdictions in the world. Debarati Halder and K. Jaishankar further define cybercrime from the perspective of gender and defined 'cybercrime against women' as "Crimes targeted against women with a motive to intentionally harm the victim psychologically and physically, using modern telecommunication networks such as internet and mobile phones".[39]

Online harassment[edit]

Whereas content may be offensive in a non-specific way, harassment directs obscenities and derogatory comments at specific individuals focusing for example on gender, race, religion, nationality, sexual orientation.

There are instances where committing a crime using a computer can lead to an enhanced sentence. For example, in the case of United States v. Neil Scott Kramer, the defendant was given an enhanced sentence according to the U.S. Sentencing Guidelines Manual §2G1.3(b)(3) for his use of a cell phone to "persuade, induce, entice, coerce, or facilitate the travel of, the minor to engage in prohibited sexual conduct." Kramer appealed the sentence on the grounds that there was insufficient evidence to convict him under this statute because his charge included persuading through a computer device and his cellular phone technically is not a computer. Although Kramer tried to argue this point, the U.S. Sentencing Guidelines Manual states that the term 'computer' "means an electronic, magnetic, optical, electrochemical, or other high-speed data processing device performing logical, arithmetic, or storage functions, and includes any data storage facility or communications facility directly related to or operating in conjunction with such device."

In the United States alone, Missouri and over 40 other states have passed laws and regulations that regard extreme online harassment as a criminal act. These acts can be punished on a federal scale, such as US Code 18 Section 2261A, which states that using computers to threaten or harass can lead to a sentence of up to 20 years, depending on the action taken.[40]

Several countries outside of the United States have also created laws to combat online harassment. In China, a country that supports over 20 percent of the world's internet users, the Legislative Affairs Office of the State Council  passed a strict law against the bullying of young people through a bill in response to the Human Flesh Search Engine.[41][42] The United Kingdom passed the Malicious Communications Act, among other acts from 1997 to 2013, which stated that sending messages or letters electronically that the government deemed "indecent or grossly offensive" and/or language intended to cause "distress and anxiety" can lead to a prison sentence of six months and a potentially large fine.[43][44]  Australia, while not directly addressing the issue of harassment, has grouped the majority of online harassment under the Criminal Code Act of 1995. Using telecommunication to send threats or harass and cause offense was a direct violation of this act. [45]

Although freedom of speech is protected by law in most democratic societies (in the US this is done by the First Amendment), it does not include all types of speech. In fact, spoken or written "true threat" speech/text is criminalized because of "intent to harm or intimidate." That also applies for online or any type of network-related threats in written text or speech.

Cyberbullying has increased drastically with the growing popularity of online social networking. As of January 2020, 44% of adult internet users in the United States have "personally experienced online harassment."[46] Children who experience online harassment deal with negative and sometimes life-threatening side effects. In 2021, reports displayed 41% of children developing social anxiety, 37% of children developing depression, and 26% of children having suicidal thoughts.[47]

The United Arab Emirates was named in a spying scandal where the Gulf nation along with other repressive governments purchased NSO Group’s mobile spyware Pegasus for mass surveillance. Prominent activists and journalists were targeted as part of the campaign, including, Ahmed Mansoor, Princess Latifa, Princess Haya, and more. Ghada Oueiss was one of the many high-profile female journalists and activists who became the target of online harassment. Oueiss filed a lawsuit against the UAE ruler, Mohamed bin Zayed Al Nahyan along with other defendants, accusing them of sharing her photos online. The defendants including the UAE ruler filed motions to dismiss the case of the hack-and-leak attack.[48]

Drug trafficking[edit]

Darknet markets are used to buy and sell recreational drugs online. Some drug traffickers use encrypted messaging tools to communicate with drug mules. The dark web site Silk Road was a major online marketplace for drugs before it was shut down by law enforcement (then reopened under new management, and then shut down by law enforcement again). After Silk Road 2.0 went down, Silk Road 3 Reloaded emerged. However, it was just an older marketplace named Diabolus Market, that used the name for more exposure from the brand's previous success.[49]

Darknet markets have had an up-rise in traffic in recent years for many reasons. One of the biggest contributors being the anonymity and safety that goes along when using the markets.[50] There are numerous ways you can lose all your money invested and be caught when using Darknet markets. Vendors and customers alike go to great lengths to keep their identities a secret while online. Commonly used tools are virtual private networks, Tails, and Tor to help hide their trail left behind for investigators. Darknet markets make the user feel safe as they can get what they want from the comfort of their home. People can easily gain access to a Tor browser with DuckDuckGo browser that allows a user to explore much deeper than other browsers such as Google Chrome. However actually gaining access to an illicit market isn't as simple as typing it in on the search engine like you would with google. Darknet markets have special links that are changing everyday ending in .onion opposed to the typical .com, .net. and .org domain extensions. To add to privacy the biggest currency on these markets is Bitcoin. Bitcoin allows transactions to be committed between people by exchanging wallet addresses and never having to know anything about the person you're sending money to. [51]

One of the biggest issues the users face who use marketplaces are the vendors or market itself exit scamming.[52] This is when usually a vendor with a high rating will act as if they're still selling on the market and have users send them money.[53] The vendor will then close off his account after receiving money from multiple buyers and never send what they purchased. The vendors all being involved in illegal activities have a low chance at not exit scamming when they no longer want to be a vendor. In 2019, an entire market called Wall Street Market had allegedly exit scammed, stealing 30 million dollars from the vendors and buyers wallets in bitcoin.[54]

Federal agents have had a huge crackdown on these markets. In July 2017, federal agents seized one of the biggest markets commonly called Alphabay.[55] Commonly investigators will pose as a buyer and order packages from darknet vendors in the hopes they left a trail they can follow. One investigation had an investigator pose as a firearms seller and for six months people purchased from them and provided home addresses.[56] They were able to make over a dozen arrests during this six-month investigation.[56] Another one of law enforcement's biggest crackdowns are on vendors selling fentanyl and opiates. With thousands of dying each year due to drug over dose it was long overdue for law enforcement to crack down on these markets.[57] Many vendors don't realize the extra charges that go along with selling drugs online. Commonly they get charged with money laundering and charges for when the drugs are shipped in the mail on top of being a drug distributor. [58]Each state has its laws and regulations on drugs therefore vendors have the face multiple charges from different states. In 2019, a vendor was sentenced to 10 years in prison after selling cocaine and methamphetamine under the name JetSetLife. [59]Although many investigators spend a lot of time tracking down people in the course of a year only 65 suspects were identified who bought and sold illegal goods on some of the biggest markets.[60] This is compared to the thousands of transactions taking place daily on these markets.

  • One of the highest profiled banking computer crime occurred during a course of three years beginning in 1970. The chief teller at the Park Avenue branch of New York's Union Dime Savings Bank embezzled over $1.5 million from hundreds of accounts.[61]
  • A hacking group called MOD (Masters of Deception), allegedly stole passwords and technical data from Pacific Bell, Nynex, and other telephone companies as well as several big credit agencies and two major universities. The damage caused was extensive, one company, Southwestern Bell suffered losses of $370,000 alone.[61]
  • In 1983, a 19-year-old UCLA student used his PC to break into a Defense Department International Communications system.[61]
  • Between 1995 and 1998 the Newscorp satellite pay to view encrypted SKY-TV service was hacked several times during an ongoing technological arms race between a pan-European hacking group and Newscorp. The original motivation of the hackers was to watch Star Trek reruns in Germany; which was something which Newscorp did not have the copyright to allow.[62]
  • On 26 March 1999, the Melissa worm infected a document on a victim's computer, then automatically sent that document and a copy of the virus spread via e-mail to other people.
  • In February 2000, an individual going by the alias of MafiaBoy began a series denial-of-service attacks against high-profile websites, including Yahoo!, Dell, Inc., E*TRADE, eBay, and CNN. About 50 computers at Stanford University, and also computers at the University of California at Santa Barbara, were amongst the zombie computers sending pings in DDoS attacks. On 3 August 2000, Canadian federal prosecutors charged MafiaBoy with 54 counts of illegal access to computers, plus a total of ten counts of mischief to data for his attacks.
  • The Stuxnet worm corrupted SCADA microprocessors, particularly of the types used in Siemens centrifuge controllers.
  • The Flame (malware) that mainly targeted Iranian officials in an attempt to obtain sensitive information.[63]
  • The Russian Business Network (RBN) was registered as an internet site in 2006. Initially, much of its activity was legitimate. But apparently, the founders soon discovered that it was more profitable to host illegitimate activities and started hiring its services to criminals. The RBN has been described by VeriSign as "the baddest of the bad".[64] It offers web hosting services and internet access to all kinds of criminal and objectionable activities, with individual activities earning up to $150 million in one year. It specialized in and in some cases monopolized personal identity theft for resale. It is the originator of MPack and an alleged operator of the now-defunct Storm botnet.
  • On 2 March 2010, Spanish investigators arrested 3 men who were suspected of infecting of over 13 million computers around the world. The "botnet" of infected computers included PCs inside more than half of the Fortune 1000 companies and more than 40 major banks, according to investigators.[65]
  • In August 2010 the international investigation Operation Delego, operating under the aegis of the Department of Homeland Security, shut down the international pedophile ring Dreamboard. The website had approximately 600 members and may have distributed up to 123 terabytes of child pornography (roughly equivalent to 16,000 DVDs). To date this is the single largest U.S. prosecution of an international child pornography ring; 52 arrests were made worldwide.[66]
  • In January 2012 experienced a security breach after as many as 24 million customers' credit card numbers, personal information, billing and shipping addresses had been compromised.[67]
  • In June 2012 LinkedIn and eHarmony were attacked, compromising 65 million password hashes. 30,000 passwords were cracked and 1.5 million EHarmony passwords were posted online.[68]
  • December 2012 Wells Fargo website experienced a denial of service attack. Potentially compromising 70 million customers and 8.5 million active viewers. Other banks thought to be compromised: Bank of America, J. P. Morgan U.S. Bank, and PNC Financial Services.[69]
  • 23 April 2013 saw the Associated Press' Twitter account's hacked - the hacker posted a hoax tweet about fictitious attacks in the White House that they claimed left President Obama injured.[70] This hoax tweet resulted in a brief plunge of 130 points from the Dow Jones Industrial Average, removal of $136 billion from S&P 500 index,[71] and the temporary suspension of AP's Twitter account. The Dow Jones later restored its session gains.
  • In May 2017, 74 countries logged a ransomware cybercrime, called "WannaCry"[72]
  • Illicit access to camera sensors, microphone sensors, phonebook contacts, all internet-enabled apps, and metadata of mobile telephones running Android and IOS were reportedly made accessible by Israeli spyware, found to be being in operation in at least 46 nation-states around the world. Journalists, Royalty and government officials were amongst the targets.[73][74][75] Previous accusations of cases of Israeli-weapons companies meddling in international telephony[76] and smartphones[77] have been eclipsed in the 2018 reported case.
  • In December 2019, the United States intelligence and an investigation by The New York Times revealed that messaging application of the United Arab Emirates, ToTok is a spying tool. The research revealed that the Emirati government attempted to track every conversation, movement, relationship, appointment, sound and image of those who install the app on their phones.[78]

Combating computer crime[edit]

It is difficult to find and combat cyber crime's perpetrators due to their use of the internet in support of cross-border attacks. Not only does the internet allow people to be targeted from various locations, but the scale of the harm done can be magnified. Cyber criminals can target more than one person at a time. The availability of virtual spaces[79] to public and private sectors has allowed cybercrime to become an everyday occurrence.[80] In 2018, The Internet Crime Complaint Center received 351,937 complaints of cybercrime, which lead to $2.7 billion lost.[81]


A computer can be a source of evidence (see digital forensics). Even where a computer is not directly used for criminal purposes, it may contain records of value to criminal investigators in the form of a logfile. In most countries[82] Internet Service Providers are required, by law, to keep their logfiles for a predetermined amount of time. For example; a European wide Data Retention Directive (applicable to all EU member states) states that all e-mail traffic should be retained for a minimum of 12 months.

There are many ways for cybercrime to take place, and investigations tend to start with an IP Address trace, however, that is not necessarily a factual basis upon which detectives can solve a case. Different types of high-tech crime may also include elements of low-tech crime, and vice versa, making cybercrime investigators an indispensable part of modern law enforcement. Methods of cybercrime detective work are dynamic and constantly improving, whether in closed police units or in international cooperation framework.[83]

Senator Tommy Tuberville touring the National Computer Forensic Institute in Hoover, Alabama in 2021.

In the United States, the Federal Bureau of Investigation (FBI)[84] and the Department of Homeland Security (DHS)[85] are government agencies that combat cybercrime. The FBI has trained agents and analysts in cybercrime placed in their field offices and headquarters.[84] Under the DHS, the Secret Service has a Cyber Intelligence Section that works to target financial cyber crimes. They use their intelligence to protect against international cybercrime. Their efforts work to protect institutions, such as banks, from intrusions and information breaches. Based in Alabama, the Secret Service and the Alabama Office of Prosecution Services work together to train professionals in law enforcement through the creation of The National Computer Forensic Institute.[85][86][87] This institute works to provide "state and local members of the law enforcement community with training in cyber incident response, investigation, and forensic examination in cyber incident response, investigation, and forensic examination."[87]

Due to the common use of encryption and other techniques to hide their identity and location by cybercriminals, it can be difficult to trace a perpetrator after the crime is committed, so prevention measures are crucial.[80][88]


The Department of Homeland Security also instituted the Continuous Diagnostics and Mitigation (CDM) Program. The CDM Program monitors and secures government networks by tracking and prioritizing network risks, and informing system personnel so that they can take action.[89] In an attempt to catch intrusions before the damage is done, the DHS created the Enhanced Cybersecurity Services (ECS) to protect public and private sectors in the United States. The Cyber Security and Infrastructure Security Agency approves private partners that provide intrusion detection and prevention services through the ECS. An example of one of these services offered is DNS sinkholing.[89]


Due to easily exploitable laws, cybercriminals use developing countries in order to evade detection and prosecution from law enforcement. In developing countries, such as the Philippines, laws against cybercrime are weak or sometimes nonexistent. These weak laws allow cybercriminals to strike from international borders and remain undetected. Even when identified, these criminals avoid being punished or extradited to a country, such as the United States, that has developed laws that allow for prosecution. While this proves difficult in some cases, agencies, such as the FBI, have used deception and subterfuge to catch criminals. For example, two Russian hackers had been evading the FBI for some time. The FBI set up a fake computing company based in Seattle, Washington. They proceeded to lure the two Russian men into the United States by offering them work with this company. Upon completion of the interview, the suspects were arrested outside of the building. Clever tricks like this are sometimes a necessary part of catching cybercriminals when weak legislation makes it impossible otherwise.[90]

Then-President Barack Obama released in an executive order in April 2015 to combat cybercrime. The executive order allows the United States to freeze assets of convicted cybercriminals and block their economic activity within the United States. This is some of the first solid legislation that combats cybercrime in this way.[91]

The European Union adopted directive 2013/40/EU. All offences of the directive, and other definitions and procedural institutions are also in the Council of Europe's Convention on Cybercrime.[92]

It is not only the US and the European Union who are introducing new measures against cybercrime. On 31 May 2017 China announced that its new cybersecurity law takes effect on this date.[93]

In Australia, common legislation in Commonwealth jurisdiction which is applied to combat against cybercrime by means of criminal offence provisions and information gathering and enforcement powers include the Criminal Code Act 1995 (Cth), Telecommunications Act 1997 (Cth) and Enhancing Online Safety Act 2015 (Cth).

In Roads and Traffic Authority of New South Wales v Care Park Pty Limited [2012] NSWCA 35, it was found that the use of a discovery order made upon a third party for the purposes of determining the identity or whereabouts of a person may be exercised merely on the prerequisite that such information requested will aid the litigation process.[94]

In Dallas Buyers Club LLC v iiNet Limited [2015] FCA 317, guidance is provided on the interpretation of rule 7.22 of the Federal Court Rules 2011 (Cth) with respect to the issue of to what extent a discovery order must identify a person for it to be a valid request for information to determine the identity or whereabouts of a person in the circumstance of an end-user of an internet service being a different person to the account holder. Justice Perram stated: '... it is difficult to identify any good reason why a rule designed to aid a party in identifying wrongdoers should be so narrow as only to permit the identification of the actual wrongdoer rather than the witnesses of that wrongdoing.'[95]


Penalties for computer-related crimes in New York State can range from a fine and a short period of jail time for a Class A misdemeanor such as unauthorized use of a computer up to computer tampering in the first degree which is a Class C felony and can carry 3 to 15 years in prison.[96]

However, some hackers have been hired as information security experts by private companies due to their inside knowledge of computer crime, a phenomenon which theoretically could create perverse incentives. A possible counter to this is for courts to ban convicted hackers from using the Internet or computers, even after they have been released from prison – though as computers and the Internet become more and more central to everyday life, this type of punishment may be viewed as more and more harsh and draconian. However, nuanced approaches have been developed that manage cyber offenders' behavior without resorting to total computer or Internet bans.[97] These approaches involve restricting individuals to specific devices which are subject to computer monitoring or computer searches by probation or parole officers.[98]


As technology advances and more people rely on the internet to store sensitive information such as banking or credit card information, criminals increasingly attempt to steal that information. Cybercrime is becoming more of a threat to people across the world. Raising awareness about how information is being protected and the tactics criminals use to steal that information continues to grow in importance. According to the FBI's Internet Crime Complaint Center in 2014, there were 269,422 complaints filed. With all the claims combined there was a reported total loss of $800,492,073.[99] But cybercrime does yet seem to be on the average person's radar. There are 1.5 million cyber-attacks annually, that means that there are over 4,000 attacks a day, 170 attacks every hour, or nearly three attacks every minute, with studies showing us that only 16% of victims had asked the people who were carrying out the attacks to stop.[100] Anybody who uses the internet for any reason can be a victim, which is why it is important to be aware of how one is being protected while online.


As cybercrime has proliferated, a professional ecosystem has evolved to support individuals and groups seeking to profit from cybercriminal activities. The ecosystem has become quite specialized, including malware developers, botnet operators, professional cybercrime groups, groups specializing in the sale of stolen content, and so forth. A few of the leading cybersecurity companies have the skills, resources and visibility to follow the activities of these individuals and group.[101] A wide variety of information is available from these sources which can be used for defensive purposes, including technical indicators such as hashes of infected files[102] or malicious IPs/URLs,[102] as well as strategic information profiling the goals, techniques and campaigns of the profiled groups. Some of it is freely published, but consistent, on-going access typically requires subscribing to an adversary intelligence subscription service. At the level of an individual threat actor, threat intelligence is often referred to that actor's "TTP", or "tactics, techniques, and procedures," as the infrastructure, tools, and other technical indicators are often trivial for attackers to change. Corporate sectors are considering crucial role of artificial intelligence cybersecurity.[103][104]

INTERPOL Cyber Fusion Center have begun a collaboration with cybersecurity key players to distribute information on latest online scams, cyber threats and risks to internet users. Reports cutting across social engineered frauds, ransomware, phishing, and other has since 2017 been distributed to security agencies in over 150 countries.[105]

Diffusion of cybercrime[edit]

The broad diffusion of cybercriminal activities is an issue in computer crimes detection and prosecution.

Hacking has become less complex as hacking communities have greatly diffused their knowledge through the Internet. Blogs and communities have hugely contributed to information sharing: beginners could benefit from older hackers' knowledge and advice. Furthermore, hacking is cheaper than ever: before the cloud computing era, in order to spam or scam one needed a dedicated server, skills in server management, network configuration, and maintenance, knowledge of Internet service provider standards, etc. By comparison, a mail software-as-a-service is a scalable, inexpensive, bulk, and transactional e-mail-sending service for marketing purposes and could be easily set up for spam.[106] Cloud computing could be helpful for a cybercriminal as a way to leverage his or her attack, in terms of brute-forcing a password, improving the reach of a botnet, or facilitating a spamming campaign.[107]


See also[edit]


  1. ^ Moore, R. (2005) "Cyber crime: Investigating High-Technology Computer Crime," Cleveland, Mississippi: Anderson Publishing.
  2. ^ "cybercrime | Definition, Statistics, & Examples". Encyclopedia Britannica. Retrieved 25 May 2021.
  3. ^ Warren G. Kruse, Jay G. Heiser (2002). Computer forensics: incident response essentials. Addison-Wesley. p. 392. ISBN 978-0-201-70719-9.
  4. ^ Bossler, Adam M.; Berenblum, Tamar (20 October 2019). "Introduction: new directions in cybercrime research". Journal of Crime and Justice. 42 (5): 495–499. doi:10.1080/0735648X.2019.1692426. ISSN 0735-648X.
  5. ^ "BUFFETT: This is 'the number one problem with mankind'". Business Insider. Retrieved 17 May 2021.
  6. ^ "Warren Buffett: 'Cyber poses real risks to humanity'". Retrieved 17 May 2021.
  7. ^ "Cyber crime costs global economy $445 billion a year: report". Reuters. 9 June 2014. Retrieved 17 June 2014.
  8. ^ "Cybercrime To Cost The World $10.5 Trillion Annually By 2025". Cybercrime Magazine. 4 March 2018. Retrieved 17 May 2021.
  9. ^ "#Cybercrime— what are the costs to victims - North Denver News". North Denver News. 17 January 2015. Retrieved 16 May 2015.
  10. ^ Lewis, James (February 2018). "Economic Impact of Cybercrime - No Slowing Down" (PDF). Cite journal requires |journal= (help)
  11. ^ "The Global Risk Report 2020" (PDF). World Economic Forum. 15th Edition: 102. 15 January 2020.
  12. ^ Netherlands, Statistics. "Less traditional crime, more cybercrime". Statistics Netherlands. Retrieved 17 May 2021.
  13. ^ Gordon, Sarah (25 July 2006). "On the definition and classification of cybercrime". Journal in Computer Virology. 2: 13–20. doi:10.1007/s11416-006-0015-z. S2CID 3334277.
  14. ^ "Computer and Internet Fraud". LII / Legal Information Institute. Retrieved 1 November 2020.
  15. ^ Laqueur, Walter; C., Smith; Spector, Michael (2002). Cyberterrorism. Facts on File. pp. 52–53. ISBN 9781438110196.
  16. ^ "Cybercriminals Need Shopping Money in 2017, too! - SentinelOne". 28 December 2016. Retrieved 24 March 2017.
  17. ^ Lepofsky, Ron. "Cyberextortion by Denial-of-Service Attack" (PDF). Archived from the original (PDF) on 6 July 2011.
  18. ^ Mohanta, Abhijit (6 December 2014). "Latest Sony Pictures Breach : A Deadly Cyber Extortion". Archived from the original on 25 September 2015. Retrieved 20 September 2015.
  19. ^ "Kaspersky Security Bulletin 2016. The ransomware revolution". Retrieved 17 May 2021.
  20. ^ "Global Ransomware Damage Costs Predicted To Reach $20 Billion (USD) By 2021". Cybercrime Magazine. 19 October 2018. Retrieved 17 May 2021.
  21. ^ Carback, Joshua T. (2018). "Cybersex Trafficking: Toward a More Effective Prosecutorial Response". Criminal Law Bulletin. 54 (1): 64–183. p. 64.
  22. ^ "IJM Seeks to End Cybersex Trafficking of Children and #RestartFreedom this Cyber Monday and Giving Tuesday". PR Newswire. 28 November 2016.
  23. ^ a b "Cybersex Trafficking". IJM. 2020.
  24. ^ "Cyber-sex trafficking: A 21st century scourge". CNN. 18 July 2013.
  25. ^ "Senator warns of possible surge in child cybersex traffic". The Philippine Star. 13 April 2020.
  26. ^ "Duterte's drug war and child cybersex trafficking". The ASEAN Post. 18 October 2019.
  27. ^ "Norwegian national, partner nabbed; 4 rescued from cybersex den". Manila Bulletin. 1 May 2020.
  28. ^ a b "Cheap tech and widespread internet access fuel rise in cybersex trafficking". NBC News. 30 June 2018.
  29. ^ "Senate to probe rise in child cybersex trafficking". The Philippine Star. 11 November 2019.
  30. ^ "Global taskforce tackles cybersex child trafficking in the Philippines". Reuters. 15 April 2019.
  31. ^ "Webcam slavery: tech turns Filipino families into cybersex child traffickers". Reuters. 17 June 2018.
  32. ^ "How the internet fuels sexual exploitation and forced labour in Asia". South China Morning Post. 2 May 2019.
  33. ^ "1st Session, 42nd Parliament, Volume 150, Issue 194". Senate of Canada. 18 April 2018.
  34. ^ "Cybersex trafficking spreads across Southeast Asia, fuelled by internet boom. And the law lags behind". South China Morning Post. 11 September 2019.
  35. ^ "What is 'Nth Room' case and why it matters". Korea Herald. 24 April 2020.
  36. ^ Dennis Murphy (February 2010). "War is War? The utility of cyberspace operations in the contemporary operational environment" (PDF). Center for Strategic Leadership. Archived from the original (PDF) on 20 March 2012.
  37. ^ Joseph, Aghatise E. (28 June 2006). "Cybercrime definition".
  38. ^ "Save browsing". google.
  39. ^ * Halder, D., & Jaishankar, K. (2011) Cyber crime and the Victimization of Women: Laws, Rights, and Regulations. Hershey, PA, USA: IGI Global. ISBN 978-1-60960-830-9
  40. ^ "Federal CyberStalking Bill Info". Retrieved 4 December 2019.
  41. ^ "China has more internet users than any other country, according to Mary Meeker's Internet Trends Report". World Economic Forum. Retrieved 4 December 2019.
  42. ^ Solutions, Madison Web. "Chinese Authorities Address Online Bullying – Cybersmile". Retrieved 2 November 2019.
  43. ^ Solutions, Madison Web. "Legal Perspective – Cybersmile". Retrieved 2 November 2019.
  44. ^ Participation, Expert. "Malicious Communications Act 1988". Retrieved 2 November 2019.
  45. ^ AG. "Criminal Code Act 1995". Retrieved 2 November 2019.
  46. ^ "U.S. internet users who have experienced online harassment 2020". Statista. Retrieved 5 April 2021.
  47. ^ "All the Latest Cyber Bullying Statistics and What They Mean In 2021". Retrieved 5 April 2021.
  48. ^ "'I will not be silenced': Women targeted in hack-and-leak attacks speak out about spyware". NBC News. Retrieved 1 August 2021.
  49. ^ "We talked to the opportunist imitator behind Silk Road 3.0". 7 November 2014. Retrieved 4 October 2016.
  50. ^ Arora, Beenu. "Council Post: Five Key Reasons Dark Web Markets Are Booming". Forbes. Retrieved 23 June 2020.
  51. ^ "Guide: What is Bitcoin and how does Bitcoin work? - CBBC Newsround". Retrieved 23 June 2020.
  52. ^ Christian, Jon (4 February 2015). "The 'Exit Scam' Is the Darknet's Perfect Crime". Vice. Retrieved 23 June 2020.
  53. ^ "The 'Exit Scam' Is the Darknet's Perfect Crime". Retrieved 14 July 2020.
  54. ^ Winder, Davey. "Did A Bitcoin Exit Scam Cause Dark Web Wall Street Market Crash?". Forbes. Retrieved 25 September 2021.
  55. ^ Brandom, Russell (17 February 2019). "The golden age of dark web drug markets is over". The Verge. Retrieved 23 June 2020.
  56. ^ a b "7 Ways the Cops Will Bust You on the Dark Web". Retrieved 14 July 2020.
  57. ^ CDC (24 March 2020). "America's Drug Overdose Epidemic: Data to Action". Centers for Disease Control and Prevention. Retrieved 14 July 2020.
  58. ^ "The Consequences of Mailing Drugs and Other Banned Substances". Retrieved 23 June 2020.
  59. ^ "Darknet drug vendor sentenced to 10 years prison". Retrieved 23 June 2020.
  60. ^ "Feds Crack Down on Darknet Vendors of Illicit Goods". Retrieved 14 July 2020.
  61. ^ a b c Weitzer, Ronald (2003). Current Controversies in Criminology. Upper Saddle River, New Jersey: Pearson Education Press. p. 150.
  62. ^ David Mann And Mike Sutton (6 November 2011). ">>Netcrime". British Journal of Criminology. 38 (2): 201–229. CiteSeerX doi:10.1093/oxfordjournals.bjc.a014232.
  63. ^ Aaron Gershwin (26 June 2019). "Flame: The Most Sophisticated Cyber Espionage Tool Ever Made". Retrieved 1 July 2019.
  64. ^ "A walk on the dark side". The Economist. 30 September 2007. Archived from the original on 10 November 2007. Retrieved 11 May 2011.
  65. ^ "Spanish police crack massive 'zombie computer' network". France 24. 3 March 2010.
  66. ^ "DHS: Secretary Napolitano and Attorney General Holder Announce Largest U.S. Prosecution of International Criminal Network Organized to Sexually Exploit Children". 3 August 2011. Retrieved 10 November 2011.
  67. ^ DAVID K. LI (17 January 2012). "Zappos cyber attack". New York Post.
  68. ^ Salvador Rodriguez (6 June 2012). "Like LinkedIn, eHarmony is hacked; 1.5 million passwords stolen". Los Angeles Times.
  69. ^ Rick Rothacker (12 October 2012). "Cyber attacks against Wells Fargo "significant," handled well: CFO". Reuters.
  70. ^ "AP Twitter Hack Falsely Claims Explosions at White House". Samantha Murphy. 23 April 2013. Retrieved 23 April 2013.
  71. ^ "Fake Tweet Erasing $136 Billion Shows Markets Need Humans". Bloomberg. 23 April 2013. Retrieved 23 April 2013.
  72. ^ "Unprecedented cyber attacks wreak global havoc". Straits Times. 13 May 2017.
  73. ^ "Israeli spyware found on phones in 45 countries, U.S. included". The Washington Times.
  74. ^
  75. ^ "Your Smartphone could be running Israeli Spyware!". September 2018.
  76. ^ "Phone hackers for hire: A peek into the discreet, lucrative business tapped by the FBI". 29 April 2016.
  77. ^ Beaumont, Peter (26 August 2016). "Israeli firm accused of creating iPhone spyware". The Guardian.
  78. ^ "Chat App ToTok Is Spy Tool For UAE – Report". Silicon UK Tech News. 27 December 2019. Retrieved 27 December 2019.
  79. ^ Barnard-Wills, David; Ashenden, Debi (21 March 2012). "Securing Virtual Space: Cyber War, Cyber Terror, and Risk". Space and Culture. doi:10.1177/1206331211430016. S2CID 146501914.
  80. ^ a b Brenner, Susan W., 1947- (2010). Cybercrime : criminal threats from cyberspace. Santa Barbara, Calif.: Praeger. ISBN 9780313365461. OCLC 464583250.CS1 maint: multiple names: authors list (link)
  81. ^ "Facts + Statistics: Identity theft and cybercrime". Retrieved 2 December 2019.
  82. ^ Zehra Ali (21 January 2018). "Mandatory Data Retention Worldwide". Retrieved 17 December 2018.
  83. ^ "Archived copy" (PDF). Archived from the original (PDF) on 19 March 2015. Retrieved 23 July 2017.CS1 maint: archived copy as title (link)
  84. ^ a b "Cyber Crime". Federal Bureau of Investigation. Retrieved 4 December 2019.
  85. ^ a b "Combating Cyber Crime". Department of Homeland Security. 19 June 2012. Retrieved 1 November 2019.
  86. ^ "NCFI - About". Retrieved 4 December 2019.
  87. ^ a b "Investigation". Retrieved 3 December 2019.
  88. ^ "The Importance of Understanding Encryption in Cybersecurity". Florida Tech Online. 18 August 2016. Retrieved 4 December 2019.
  89. ^ a b "Detection and Prevention | CISA". Retrieved 1 November 2019.
  90. ^ Kshetri, Nir. "Diffusion and Effects of Cyber Crime in Developing Countries". Archived from the original on 18 October 2015. Retrieved 29 April 2015.
  91. ^ Northam, Jackie (April 2015). "U.S. Creates First Sanctions Program Against Cybercriminals". NPR.
  92. ^ Adrian Cristian MOISE (2015). "Analysis of Directive 2013/40/EU on attacks against information systems in the context of approximation of law at the European level" (PDF). Journal of Law and Administrative Sciences. Archived from the original (PDF) on 8 December 2015.
  93. ^ "China's new cybersecurity law takes effect today". June 2017.
  94. ^ "Roads and Traffic Authority of New South Wales v Care Park Pty Limited - NSW Caselaw". NSW Caselaw. Retrieved 22 August 2021.
  95. ^ "Dallas Buyers Club LLC v iiNet Limited [2015] FCA 317". Federal Court of Australia. Retrieved 22 August 2021.
  96. ^ OMH. "Criminal Justice System for Adults in NYS". Retrieved 17 December 2018.
  97. ^ "Managing the Risks Posed by Offender Computer Use - Perspectives" (PDF). December 2011. Archived from the original (PDF) on 5 November 2013. Retrieved 25 January 2015.
  98. ^ Bowker, Art (2012). The Cybercrime Handbook for Community Corrections: Managing Risk in the 21st Century. Springfield: Thomas. ISBN 9780398087289. Archived from the original on 2 April 2015. Retrieved 25 January 2015.
  99. ^ "2014 Internet Crime Report" (PDF). Internet Crime Complaint Center (IC3). 2015. Retrieved 31 October 2017.
  100. ^ Feinberg, T (2008). "Whether it happens at school or off-campus, cyberbullying disrupts and affects". Cyberbullying: 10.
  101. ^ "Dridex: Tidal waves of spam pushing dangerous financial Trojan" (PDF).
  102. ^ a b "Insights into Iranian Cyber Espionage: APT33 Targets Aerospace and Energy Sectors and has Ties to Destructive Malware « Insights into Iranian Cyber Espionage: APT33 Targets Aerospace and Energy Sectors and has Ties to Destructive Malware". FireEye. Retrieved 3 January 2018.
  103. ^ Janofsky, Adam (19 September 2018). "How AI Can Help Stop Cyberattacks". The Wall Street Journal. ISSN 0099-9660. Retrieved 20 September 2018.
  104. ^ Noyes, Katherine. "This company uses A.I. to stop cyber attacks before they start". Computerworld. Retrieved 20 September 2018.
  105. ^ "Cybercrime threat response". Retrieved 17 May 2021.
  106. ^ Richet, Jean-Loup (2011). "Adoption of deviant behavior and cybercrime 'Know how' diffusion". York Deviancy Conference.
  107. ^ Richet, Jean-Loup (2012). "How to Become a Black Hat Hacker? An Exploratory Study of Barriers to Entry Into Cybercrime". 17th AIM Symposium.
  108. ^ "ASEAN Declaration to Prevent and Combat Cybercrime". ASEAN | ONE VISION ONE IDENTITY ONE COMMUNITY. 14 November 2017. Retrieved 3 August 2019.

Further reading[edit]

External links[edit]

Government resources[edit]