Cyber-Enabled Economic Crime-Analysing The Financial Impact On The Global Economy
Author: LawSphereX
Category: Criminal Law
Published:
Updated:
CYBER-ENABLED ECONOMIC CRIME-ANALYSING THE
FINANCIAL IMPACT ON THE GLOBAL ECONOMY T. Vanitha, B.C.A.LLB, LLM (Pursuing), The Tamilnadu Dr. Ambedkar Law University Ms. T. Vaishali B.A. (Eng Lit), LLM., NET., Ph.D (Pursuing) Assistant Professor of Law, The Tamilnadu Dr. Ambedkar Law University V. Viduthalai Virumbi, B.C.A.LLB, LLM (Pursuing), The Tamilnadu Dr. Ambedkar Law University
ABSTRACT
Economic offence is an illegal act committed to achieve a financial gain and it also forms a separate category of criminal offences in our country. The Economic crimes are committed by an individual have a serious repercussions on the National economy as well as the national security. Among economic crimes one such is the Cyber enabled economic crimes which is recently used as a tool for committing crimes in large scale. The term Cyber-enabled economic crimes refer to the crime which facilitate or amplified through the use of digital technology. The cyber-enabled economic crime has a high impact on the global economy as it exploits the digital platforms to reach unprecedented scales affecting individual and the government worldwide. The various cyber- enabled economic crimes includes cyber economic terrorism, cyber economic extortion, cyber warfare etc.
These crimes present a complex threat to the global economy. The paper discusses about the various ways of cyber-enabled economic crimes committed in a country and its impact to the global economy. It also discusses about the regulatory framework to mitigate these risk and to protect the integrity of the global economy. Keywords: Cybercrime, Economic crime, National security, Data protection
INTRODUCTION
In the digital era, the technology as well as the human goes hand in hand. The advancement of the technology has upgraded the communication medium from pigeons to Facebook. The betterment of the technology has introduced various opportunities. This advancement has pros as well as cons. The cyber-enabled economic crime is a major transnational organised crime that has grown exponentially in recent times. The advancement has made such crimes from particular area to global level which affects the single nation to entire global economy. In various economic crimes with the aid of technology the offender commits the crime where his physical presence is not required which means that these crimes can be committed in countries with the poor legal framework and law enforcement infrastructure to counter them.
These crimes exploit digital vulnerabilities to commit fraud, theft and extortion leaving long-lasting economic consequences. A common global approach to deal with the problem could contribute to further strengthening international cooperation and law enforcement mechanisms. This would require standardization of legal definitions of cyber-enabled economic crime and expertise for investigating such crimes within law enforcement agencies, especially in developing countries. MAJOR CYBER-ENABLED ECONOMIC CRIMES WHICH AFFECTS THE GLOBAL ECONOMY
1 CYBER ECONOMIC TERRORISM
Cyber terrorism is defined as the cognitive, affective, behavioural and motivational factors of terrorist groups or their agents who use information and communications technology (ICT) to impair, harm or destroy non-combatant targets. cyber terrorism mean when someone disrupt the computer system and try to inflict the virus or network is amount to cyber terrorism. It is different from activism, hactivism and cybercrime in that the primary purpose of a cyber-terrorist attack is to cause physical violence or extreme financial harm. The cyber economic terrorism refers to deliberate, politically or ideologically motivated cyber-attacks targeting a nation’s economic systems to destabilize its economy, undermine its security or influence its political standing.
Unlike traditional economic crimes driven by financial gain, these attacks aim to create widespread economic and psychological disruption. the Cyber terrorist deeply perceive a new global reach for their activities as they train themselves with tools of information war force. Hackers and crackers can be turned in to a network of global terrorists. 1 Common targets include government entities, financial institutions, power grids, transportation systems, and other critical infrastructure that, if disrupted, can lead to widespread economic consequences. Attackers may employ various techniques such as Distributed Denial of Service (DDoS) attacks, ransomware, malware, and social engineering to achieve their goals. NATURE OF CYBER TERRORISM: Cyber terrorism includes several characteristics. The cyber terrorism can be traced by the following signs.
1. Attack are predetermined and victim are specifically targeted
2. Attack has an objective to destroy or damage specific target such as political,
economic energy civil and military infrastructures.
3. Attack may even target specific opposing religious group information
infrastructures.
4. Destroy the enemies’ capabilities to further operate or separate within their own
area.2 Motive behind cyber economic terrorism: a) Political Objective: The cyber economic terrorists object is to advance specific agendas, disrupt governmental functions or retaliate against perceived injustices. b) Fear and Intimidation: The cyber terrorism hits the economic system which creates fear in the population
1 Amita verma, Cyber Crime and Law, CLA,229,Ed., 2010.
2 Dr.M.Das Gupta, Cyber Crime in India, Eastern Law House, P.196
and undermines public confidence in government and institutions.
2 CYBER-ENABLED EXTORTION
Cyber extortion involves attackers accessing sensitive data on a victim's computer network or system using methods like ad scams, phishing emails, infected websites, and other tactics. In some cases, the attacker may not be directly responsible for carrying out the attack. It is a fearbased tactic where cybercriminals threaten to damage systems or leak sensitive data unless a ransom is paid. This digital blackmail aims to extort money or other valuable assets.Cyber extortion can happen through various methods, some of the most common ones include:
1 Ransomware Attacks
This entails malware that encrypts a victim's files. The attackers subsequently request a ransom payment in return for the decryption key until the ransom is settled. How Does a Ransomware Attack Work? Infection: • Phishing Emails: Phishing emails are fraudulent messages sent by cybercriminals to trick recipients into revealing sensitive information or performing actions that compromise security. These emails often appear to come from legitimate organizations, such as banks, online services, or government agencies, but they are designed to deceive..3 • Exploiting Vulnerabilities: Attackers exploit software vulnerabilities to gain unauthorized access to systems. • Drive-by Downloads: Malicious code is downloaded to victims' devices without their knowledge, often through compromised websites. Encryption: The ransomware encrypts files on the device and network shares.
3 https://www.cisco.com/c/en/us/products/security/email-security/what-is-phishing.html
Ransom Demand: A ransom note appears on the victim's screen, demanding payment in cryptocurrency or other digital currencies. This demand may vary from person to person.
2 Data Extortion
Data extortion is a dangerous cybercrime where attackers steal confidential information and use it as leverage to extort money from victims.
3 DDoS Attacks
A Distributed Denial of Service (DDoS) attack is a cyberattack aimed at disrupting the normal operations of a targeted server, service, or network by overwhelming it with excessive internet traffic. In a DDoS attack, multiple compromised computers (often part of a botnet) are used to send a large volume of requests or data to the target, rendering it unable to respond to legitimate traffic. This can lead to service outages, slow response times, and significant disruption to the targeted organization or service.4
4 Doxing
Doxing, in the context of cyber-enabled economic crime, refers to the malicious act of publicly revealing personal information about individuals, often with the intent to harm or intimidate them. This can include sharing sensitive data such as home addresses, phone numbers, or financial information, which can lead to identity theft or other forms of exploitation.
3 CYBER WARFARE
Cyber war is that war which fought by internet between countries. When one country accesses the secret of other country by internet and uses that secret against that country is known as cyber warfare.5 In the era of information and communication technology one nation causes terrorist violence by using new technology against the nation. Cyber warfare refers to the strategic use of cyber-attacks by nation-states or international organizations to target another
4 https://www.cloudflare.com/learning/ddos/what-is-a-ddos-attack
5 https://www.ijirmf.com/wp-content/uploads/IJIRMF201510003.pdf
country's national security. It involves actions that aim to disrupt, damage, or destroy critical infrastructure, government systems, and civilian networks. This form of conflict can cause significant harm comparable to traditional warfare, impacting economies, political stability, and public safety. For example between Israel and Pakistan Netwar, India and Pakistan Netwar, China and USA Netwar.6 Key Tactics and Techniques: • Cyber Espionage: Gaining unauthorized access to sensitive information, such as government secrets, military plans, or corporate trade secrets. • Cyber Propaganda: Spreading misinformation and disinformation to influence public opinion and undermine trust in institutions.
4 ECONOMIC ESPIONAGE
Espionage is the act of secretly obtaining confidential information without permission. It's often associated with intelligence gathering by governments, militaries, or corporations. Economic espionage, a specific type, involves stealing trade secrets and intellectual property for the benefit of foreign entities or governments. This poses a serious threat to national security and economic stability, prompting legal measures like the Economic Espionage Act. Driven by the desire to gain a competitive edge in the global market, economic espionage can have severe consequences for businesses, including financial loss, reputational damage, and loss of market advantage. This type of espionage is usually carried out by foreign governments or competitors seeking to gain an advantage in the global marketplace.
Motivations: • Gaining a Competitive Advantage: Stealing trade secrets or intellectual property to outmaneuver competitors. • Closing a Technology Gap: Acquiring advanced technology to bridge the gap between domestic capabilities and foreign innovation. 6 Vikram Singh Jaswal and Shweta Thakur Jaswal,Cyber Crime and Information Technology Act,2000,pg no. 27
Economic Warfare: Using espionage to weaken a rival nation's economy or disrupt its industries. Methods: • Human Intelligence (HUMINT): Recruiting and using agents or informants. • Electronic Intelligence (SIGINT): Intercepting communications via hacking or surveillance. • Physical Surveillance: Monitoring locations, movements, or activities. • Counterfeit Operations: Using fake identities or disguises.
EXAMPLES OF ECONOMIC ESPIONAGE:
In 2015, China has been repeatedly accused of extensive economic espionage, particularly by the U. S. government. This alleged activity involves the theft of valuable information, such as trade secrets and intellectual property, from American companies across various sectors, including technology, aerospace, and healthcare. While China has denied these claims, the evidence presented by numerous sources has raised significant concerns about its cyber activities and their impact on global security and economy. • In 2014, Sony Pictures was the target of a cyberattack that compromised sensitive information, including unreleased movies, employee data, and executive emails. North Korea, angered by the film "The Interview," which satirized their leader, was accused of orchestrating this attack.
The incident not only caused significant financial damage to Sony Pictures but also tarnished its reputation and negatively impacted its employees. • In 2013, a former DuPont employee, a Chinese national, was convicted in 2013 of stealing trade secrets related to titanium dioxide production. This white pigment is used extensively in various products. The employee was accused of stealing confidential information about the titanium dioxide production process and selling it to Chinese companies. This theft significantly harmed DuPont's competitive position in the market,
while giving Chinese companies a substantial advantage.7
5 COMPUTER SABOTAGE
Computer sabotage is a malicious act aimed at damaging or destroying computer hardware or software. Unlike traditional sabotage, which often involves physical destruction, computer sabotage can be carried out remotely through the internet. Physical Sabotage: This involves physical damage to hardware components like monitors, keyboards, or the main processing unit. It might also involve tampering with cables or power supplies. Cyber Sabotage: This involves the use of malicious software, such as viruses, worms, or ransomware, to disrupt computer systems. Cyberattacks can range from simple data corruption to large-scale network disruptions. 8 Once attackers gain unauthorized access, they commit various acts of sabotage which includes: • Deleting or corrupting files: Cybercriminals may erase or damage important files, rendering them unusable or lost forever.
This can cause significant data loss. • Modifying configurations: Hackers can manipulate system configurations, changing settings or parameters to disrupt normal functionality. Such changes can lead to system instability, reduced performance, or even total failure. • Causing system outages: Sabotage attacks can interrupt critical services, resulting in shortor long-term outages. These disruptions can incur financial losses and diminish customer trust and satisfaction. • Implanting malware: Attackers may introduce malicious software, such as ransomware, to harm systems. It encrypts files, making them inaccessible. This can have severe consequences, especially for organizations handling sensitive or essential data. 9
7 https://fastercapital.com/startup-topic/Economic-Espionage.html
8 Vikram Singh Jaswal and Shweta Thakur Jaswal,Cyber Crime and Information Technology Act,2000,pg no. 27
9 https://www.vpnunlimited.com/help/cybersecurity/sabotage
RECENT INSTANCES OF CYBER SABOTAGE:
In 2017, This global ransomware outbreak impacted over 150 countries, including India, infecting more than 40,000 computers nationwide. It primarily targeted sectors like businesses, healthcare, and critical infrastructure by exploiting vulnerabilities in outdated Microsoft Windows systems. The malware encrypted data and demanded ransom in Bitcoin for recovery. • Cyberattack on Jawaharlal Nehru Port and APM Terminals Mumbai (2017) The port was severely disrupted by the Petya/NotPetya ransomware, which crippled operations at India's largest shipping hub. The malware attack caused major disruptions to container logistics and supply chain management. • In 2018, a significant breach occurred when hackers gained unauthorized access to the UIDAI (Unique Identification Authority of India) database, which stores Aadhaar details. This breach exposed the personal information of 1.
1 billion individuals, including sensitive data such as names, addresses, phone numbers, and Aadhaar numbers. The stolen data was subsequently listed for sale on various platforms, raising concerns about data security and privacy. The incident underscored vulnerabilities in critical government systems and highlighted the potential consequences of inadequate cyber security measures in protecting large-scale citizen databases.
IMPACT OF CYBER-ENABLED ECONOMIC CRIME: The economic repercussions of cybercrime are far-reaching and profound, affecting the global economy. • Financial Losses: Cyberattacks can lead to the theft of financial information and banking credentials, resulting in financial fraud and significant monetary losses. • Loss of Intellectual Property: The theft of intellectual property (IP) is a major issue in today's digital world. Cybercriminals often target organizations to extract trade secrets, patents, copyrighted materials, and other proprietary information. The Stolen IP can be sold on the black market or exploited by competitors, undermining a company’s unique position in the market. The consequences of such loss will lead to decreased innovation, loss of competitive advantage and damage brand reputation.
Apart from this P theft is estimated to cost the global economy billions annually, affecting industries such as technology, pharmaceuticals, and manufacturing. This hampers growth, reduces tax revenues, and undermines fair competition. • Increased Security Spending: As the threat landscape evolves, organizations are forced to invest heavily in cybersecurity measures to protect their systems and data. This includes the implementation of advanced security technologies, hiring skilled professionals, and conducting regular security audits. • Increased Government Spending: Governments worldwide are grappling with the financial impact of cybercrime, requiring substantial investments in cybersecurity systems, enhanced law enforcement efforts, and comprehensive legal frameworks to tackle these threats.
However, diverting public funds to address cybercrime often means reducing resources for other critical sectors like healthcare, education, and infrastructure development, posing challenges in balancing priorities. • Disruption of Global Trade and Supply Chains: o Attacks on logistics and supply chain systems (e. g. , Maersk cyberattack, 2017) disrupt global trade. o A compromised supply chain can halt manufacturing and increase costs for businesses. o A single vulnerable node in a globalized supply chain can lead to widespread disruptions. • Widening Economic Inequality: o Countries with weaker cybersecurity infrastructures are more vulnerable to attacks. o Economic recovery is slower due to limited resources and expertise. o Wealthier nations with robust defenses can recover faster, leaving developing nations further behind.
10 MITIGATING THE IMAPCT OF CYBER-ENABLED ECONOMIC CRIME The growing complexity of cyberattacks is increasingly merging organized crime and terrorism into a single, formidable threat. With the rapid expansion of the Internet of Things (IoT), businesses are under greater pressure to secure their products and services. A cyber breach can lead to financial losses, stolen data, and eroded public trust, regardless of a company's size. The following strategies are critical to tackling the escalating issue of cybercrime:
1 Implementing Fundamental Security Measures
o Consistently apply software updates, security patches, and open security frameworks. o Invest in protective technologies across devices and platforms, including mobile and cloud systems. o Cybercrime prevention often hinges on basic security protocols rather than highly advanced solutions, requiring shared responsibility between businesses and consumers.
2 Fostering International Collaboration
o Strengthen partnerships between global law enforcement agencies and private sector organizations. o Allocate additional resources to cybercrime investigations, especially in
10 Anju Gautam, Cyber Intelligence, pg No.272
countries with limited capabilities.
3 Updating Legal Mechanisms
o Modernize agreements like the Mutual Legal Assistance Treaty (MLAT) to reflect the demands of the digital age. o Simplify and expedite processes for cross-border investigations and evidencesharing.
4 Standardizing Cybersecurity in Key Sectors
o Establish uniform cybersecurity standards and promote information-sharing, particularly in critical industries like finance, to enhance resilience.
5 Strengthening Legislative Frameworks
o Countries with weak cybercrime laws often create challenges for their neighbors. The Budapest Convention has laid some groundwork, but nations like Russia oppose it, citing a lack of inclusion in its formation and concerns over intrusion. Without new international agreements, efforts to combat cybercrime will remain limited.
6 Addressing Cybercrime Havens
o The global community must pressure nations serving as safe havens for cybercriminals to cooperate with international law enforcement. o Introduce financial penalties or other consequences for non-cooperative governments. Since sanctions against countries like Russia and North Korea have yielded limited results, innovative and flexible punitive measures are needed. Combatting cyber-enabled economic crime requires a multifaceted approach that combines proactive defense, international cooperation, and accountability measures to mitigate its economic and societal impact.
GOVERNMENT INITIATIVE TO OVERCOME CYBER-CRIME IN INDIA
The Government of India has implemented various measures and initiatives to combat cybercrime and enhance the nation’s cybersecurity infrastructure. Key initiatives include:
1 Establishment of Dedicated Cyber Crime Agencies
Indian Cyber Crime Coordination centre (I4C):
A national-level initiative to combat cybercrime in a coordinated manner, focusing on capacity building, threat analysis, and public awareness. • Cyber Crime Reporting Portal: An online platform (www.cybercrime.gov.in) for citizens to report cybercrime incidents, including financial fraud and online abuse.
2 Legislative Framework
Information Technology Act, 2000: The primary law governing cybercrime and electronic commerce in India. It provides a legal framework for addressing offenses such as hacking, identity theft, and data breaches.
3 Capacity Building and Training
Cyber Training for police and Judicial officers: Specialized training programs are conducted for law enforcement agencies to enhance their capabilities in handling cybercrime cases. • Cyber Swachhta Kendra (Botenet Cleaning and Malware Analysis Centre): Aimed at detecting and cleaning malicious programs from devices to prevent cyberattacks.
4 Public Awareness Campaigns
Initiatives like "Cyber Jaagrookta Divas" (Cyber Awareness Day) and awareness drives educate citizens on safe online practices, cyber hygiene, and fraud prevention.
5. CERT-In (Indian Computer Emergency Response Team)
CERT-In monitors and responds to cybersecurity incidents. It also issues advisories, guidelines, and alerts to prevent cyber threats.
6. National Cyber Security Policy (NCSP) 2013
A comprehensive framework to secure the country’s cyberspace by promoting security standards, research, and public-private partnerships.
7. Collaboration and International Cooperation
Agreements with other countries and global organizations to exchange information and best practices for tackling cross-border cybercrime.
8. Data Protection and Privacy Laws
Drafting of new data protection laws, such as the Digital Personal Data Protection Act, to safeguard citizens’ personal information from misuse and cybercrime.
9. Infrastructure Development
Establishment of Cyber Forensic Labs and Cyber Crime Units in states to strengthen investigation capabilities.
10. National Critical Information Infrastructure Protection Centre (NCIIPC)
Focused on protecting critical information infrastructure in sectors like banking, telecom, and power.11 These initiatives reflect the government's commitment to creating a robust framework to prevent, detect, and respond to cybercrimes while promoting a safer digital ecosystem.
11 https://www.nextias.com/ca/current-affairs/29-11-2021/cyber-enabled-financial-crime
GLOBAL INITIATIVE TO COMBAT CYBER-ENABLED ECONOMIC CRIME Cybercrime transcends borders, necessitating international collaboration and shared initiatives to effectively combat it. Here are key global efforts to address cybercrime: • INTERPOL's Cybercrime Strategy: INTERPOL plays a critical role in combating global cybercrime by facilitating collaboration, intelligence sharing, and operational support among its member countries. Its Cybercrime Strategy is designed to address the complexities of modern cyber threats and reduce the impact of cybercrime worldwide. It acts as a central hub for international cybercrime investigations, coordinating efforts between law enforcement agencies across borders.
• World Economic Forum (WEF) – Global Centre for Cybersecurity: The Global Centre for Cybersecurity was established by the World Economic Forum (WEF) in 2018 to address the increasing global threats of cybercrime and cyberattacks. It serves as a platform for collaboration among governments, businesses, international organizations, and academia to enhance global cybersecurity and reduce the risks posed by cyber threats. • Five Eyes Alliance: The Five Eyes Alliance is an intelligence-sharing partnership comprising five Englishspeaking countries: the United States, the United Kingdom, Canada, Australia, and New Zealand. Established during World War II, it initially focused on intercepting signals intelligence but has since expanded to address modern threats, including cybercrime and cybersecurity.
• ASEAN Cybersecurity Cooperation Strategy: The ASEAN Cybersecurity Cooperation Strategy is a regional initiative designed to enhance cybersecurity resilience and address the unique challenges posed by cybercrime and cyber threats in Southeast Asia. It promotes collaboration among member states of the Association of Southeast Asian Nations (ASEAN) to ensure secure and trusted digital ecosystems.
CONCLUSION
Cyber-enabled economic crime poses a significant and growing threat to global economies, organizations, and individuals. As technology advances, criminals are leveraging sophisticated methods such as phishing, ransomware, financial fraud, and intellectual property theft to exploit vulnerabilities in digital systems. The consequences are far-reaching, including financial losses, reputational damage, erosion of trust, and disruptions to critical infrastructure. To combat this evolving threat, a multi-faceted approach is essential. Governments, businesses, and international organizations must collaborate to enhance cybersecurity, implement robust policies, and share threat intelligence.
Initiatives such as public-private partnerships, capacitybuilding programs, and global frameworks like the Budapest Convention on Cybercrime and the Global Centre for Cybersecurity underscore the need for collective action. Ultimately, addressing cyber-enabled economic crime requires a combination of prevention, detection, and response strategies. Proactive measures like adopting advanced security technologies, educating stakeholders, and fostering international cooperation can significantly reduce risks. By prioritizing cybersecurity as a fundamental aspect of economic stability, the global community can mitigate the impact of cyber-enabled crimes and build a safer, more resilient digital ecosystem.