Wang, Yichao;
Roscoe, Sophia;
Arief, Budi;
Connolly, Lena;
Borrion, Herve;
Kaddoura, Sanaa;
(2023)
The Social and Technological Incentives for Cybercriminals to Engage in Ransomware Activities.
In:
International Symposium on Security and Privacy in Social Networks and Big Data SocialSec 2023: Security and Privacy in Social Networks and Big Data.
(pp. pp. 149-163).
Springer Nature
![[thumbnail of SocialSec_2023___RIF_Ransomware_Project__camera_ready_.pdf]](https://discovery.ucl.ac.uk/style/images/fileicons/text.png) |
Text
SocialSec_2023___RIF_Ransomware_Project__camera_ready_.pdf - Accepted Version Access restricted to UCL open access staff until 4 August 2024. Download (684kB) |
Abstract
Ransomware attacks and the use of the dark web forums are two serious contemporary cyber-problems. These two areas have been investigated separately in the past, but there is currently a gap in our understanding with regard to the interactions between them – i.e., dark web forums that can potentially lead to ransomware activities. The rise of Ransomware-as-a-Service (RaaS) exacerbates these problems even further. The aim of this paper is therefore to investigate the social and technological discourse within the dark web forums that may foster or initiate some of the users’ pathway towards ransomware-related criminal activities. To this aim, we carried out data collection (crawling) of pertinent posts from the “Dread” dark web forum, based on sixteen keywords commonly associated with ransomware. Our data collection and manual screening processes resulted in the identification of 1,279 posts related to ransomware, with the posting dates between 25 March 2018 and 30 September 2022. Our dataset confirms that ransomware-related posts exist on the Dread dark web forum. We found that these posts can generally be grouped into eight categories: Hacker, Potential Hacker, RaaS Provider, Education, Information, News, Debate and Other. Furthermore, the contents of these posts shed some light on the social and technological incentives that may encourage some actors to get involved in ransomware crimes. In conclusion, such posts pose a threat to cyber security, because they might provide a pathway for wannabe ransomware operators to get in on the act. The findings from our research can serve as a starting point for devising practical countermeasures, for instance by considering how such posts should be handled in the future, or how some follow-up intervention actions can be prepared in anticipation of certain actors getting involved in ransomware as a result of reading posts in such forums.
| Type: | Proceedings paper |
|---|---|
| Title: | The Social and Technological Incentives for Cybercriminals to Engage in Ransomware Activities |
| Event: | 9th International Symposium on Security and Privacy in Social Networks and Big Data |
| Location: | University of Kent, Canterbury, UK |
| Dates: | 14 Aug 2023 - 16 Aug 2023 |
| ISBN-13: | 978-981-99-5177-2 |
| DOI: | 10.1007/978-981-99-5177-2_9 |
| Publisher version: | https://doi.org/10.1007/978-981-99-5177-2_9 |
| Language: | English |
| Additional information: | This version is the author accepted manuscript. For information on re-use, please refer to the publisher's terms and conditions. |
| Keywords: | Ransomware, dark web, dark web forum, social interaction, data collection and analysis, crawler |
| UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Security and Crime Science |
| URI: | https://discovery.ucl.ac.uk/id/eprint/10170591 |
Archive Staff Only
 |
View Item |
