Understanding Cybercrime And Its Classifications
Author: LawSphereX
Category: Criminal Law
Published:
Updated:
UNDERSTANDING CYBERCRIME AND ITS
CLASSIFICATIONS
Bazar Navya, ICFAI Law School, Hyderabad
ABSTRACT
Cybercrime has emerged as a significant threat in the digital age, impacting individuals, organizations, and governments globally. This paper seeks to explore the multifaceted nature of cybercrime, providing a comprehensive understanding of its various forms and classifications. Cybercrime can be broadly categorized into three main types: Crime against an individual, which involve offenses that can only be committed using information and communication technology, like Cyber bullying, Cyberstalking, e-mail spoofing, cyber defamation. Crime against property are augmented or facilitated by obtaining personal financial information of an individual by using software and communication technology. This category involves Credit Card fraud, Intellectual property crimes, hacking computer systems, cyber vandalism.
The next category is crime against an organization or society like Cyber terrorism, web jacking, salami attack, cyber espionage. The paper further categorizes cybercrime into specific types, Phishing, identity theft, Denial of service attack (DoS), cyber pornography or child pornography, cyber stalking etc. Each type represents unique challenges in terms of detection, prevention, and prosecution due to the rapid evolution of technology and the anonymity provided by the internet. Moreover, the global nature of cybercrime necessitates international cooperation and the development of adaptive legal frameworks and cyber security measures. The evolution of cybercrime is closely linked to advancements in technology, requiring continuous adaptation of legal frameworks and cyber security measures.
By analyzing different classifications of cybercrime, this paper aims to highlight the challenges in combating these crimes and emphasizes the need for international cooperation and proactive strategies to mitigate their impact. Understanding the nuances of cybercrime is crucial for developing effective prevention, detection, and response mechanisms in the ever-evolving digital landscape. Keywords: Cyber vandalism, Salami attack, Cyber espionage, Web jacking, Phishing
Introduction
Cybercrime is the act of attempting to profit by targeting devices or computers connected to the internet. It is done with the objective of accessing the user's data for personnel purposes. The people who perpetrate crimes are known as hackers, and they are highly technically strong people who know how to meddle with the user's personal data that is available online without the user's knowledge. It is done with the intention of creating money for oneself. Cybercriminals take advantage of loopholes in computer systems and networks to enter restricted areas without authorization, steal confidential data, interfere with services, or harm people financially.
As technology evolves, so do the methods and tactics employed by cybercriminals, making it crucial for individuals, businesses, and governments to continually adapt and enhance cybersecurity measures to mitigate the risks posed by cybercrime. Cybercrime, stemming from the ever-increasing reliance on technology in modern society, presents a formidable challenge. As our dependence on the internet and other networked technologies continues to expand, so does the convenience they offer. However, this extensive and pervasive medium also harbors darker aspects. Despite the numerous advantages the internet brings, it also provides fertile ground for illicit activities. Cybercriminals exploit its vastness and omnipresence to commit a wide range of offenses, including identity theft, financial fraud, hacking, and malware distribution.
This relentless surge in cybercrime emphasizes the urgent need for robust cybersecurity measures and increased awareness to protect individuals, businesses, and institutions from its harmful effects. Classification of Cyber Crimes Cybercrimes can indeed be categorized into various types based on different criteria. One common classification method organizes cybercrimes based on the target groups they affect. These categories are:
1) Crime against an individual like cyber bullying, cyber stacking etc.
2) Crime against property like credit card fraud, hacking computer systems etc.
3) Crime against an organization or society like cyber terrorism, hacking etc.
1. Crime against an individual - The category of cybercrime involving the distribution
of malicious or illegal information online primarily targets individual victims. It encompasses a range of harmful activities aimed at exploiting personal data or causing distress. Examples like cyber stalking, cyberbullying, human trafficking facilitated through online platforms and the sharing of non-consensual intimate images, and harassment are among the malicious activities targeting individual victims in cyberspace. Overall, addressing individual-oriented cybercrimes requires a multifaceted approach, including raising awareness, implementing effective cyber security measures, and enforcing stringent legal frameworks to protect individuals from harm and uphold their rights in the digital age. 1 Types of cybercrime that come under the above-mentioned category are – A.
Cyber bullying – Cyberbullying refers to the use of digital communication tools such as social media, messaging apps, or online forums to harass, intimidate, or defame individuals. It takes place in the virtual realm, which includes hacking of accounts, sharing child pornography, sending offensive texts etc, allowing perpetrators to remain anonymous and reach a broader audience quickly. This is also known as online or internet bullying. In general, cyberbullying refers to the following online activities: a. Online bullying victims may be subjected to humiliating or embarrassing content, as well as social media hacking. b. Posting nasty messages or photos via social media. c. Threatening the victim to engage in any violent conduct. d. Threatening someone with child pornography, spreading rumors, and creating fake profiles.
Cyberbullying can have severe consequences for victims, including psychological distress, social isolation, academic difficulties, and even self-harm or suicide in extreme cases. It is a growing concern, especially among young people, and requires proactive measures from parents, educators, and policymakers to address and prevent its harmful effects. To combat the growing threat of cyberbullying we can report to the Police and Cyber Crime Unit at both the 1All About Classifications of Cyber Crimes, iPleaders, https://blog. ipleaders. in/all-about-classifications-ofcyber-crimes/. central and state levels have been working hard and tirelessly. A complaint can be logged online on www. cybercrime. gov. in or through Helpline number 1930. B.
Cyberstalking – Cyberstalking is a nefarious practice involving the persistent harassment, monitoring, or intimidation of an individual through various online platforms and electronic means. It encompasses a range of behaviors aimed at instilling fear, distress, or harm in the victim, often resulting in significant emotional and psychological repercussions. The majority of victims of this crime are children who are stalked by adult predators and pedophiles, and women who are stalked by men. Cyberstalkers prey on unskilled web users who are unaware of netiquette and online safety guidelines. Cyberstalking represents a serious violation of personal boundaries and online safety, with far-reaching implications for victims' well-being and security. This requires a multifaceted approach involving legal recourse, technological safeguards, and support services for victims.
It's crucial for individuals to take proactive measures to safeguard their online privacy and security, including adjusting privacy settings, blocking or reporting abusive individuals, and seeking assistance from law enforcement or support organizations when needed. 2 C. E-Mail Spoofing - Email spoofing is a deceptive technique utilized in cybercrime where the sender disguises the origin of an email to make it appear as though it's coming from a trusted source, when in reality; it's from an illegitimate or malicious sender. In these instances, the sender manipulates the email headers or forges the sender's address to make it appear as though the message is coming from a reputable entity, such as a bank, government agency, or well-known company.
Users should exercise caution when interacting with unsolicited emails, especially those requesting sensitive information or urging immediate action. D. Cyber Defamation - Cyber defamation, also known as online defamation or internet defamation is a form of cybercrime that involves the dissemination of false and damaging statements or information about an individual, business, or organization through digital channels, such as social media, websites, forums, or online reviews. These statements can harm the reputation, credibility, or livelihood of the victim,
2 What Is Cyber Bullying? Definition, Types, Effects & Laws, GeeksforGeeks,
https://www.geeksforgeeks.org/what-is-cyber-bullying-definition-types-effects-laws/. leading to legal consequences and significant personal or financial repercussions. Cyber defamation encompasses various actions like false statements, negative reviews, impersonation, revenge defamation, defamatory images or videos etc. Cyber defamation presents considerable obstacles for individuals who fall victim to it, as the dissemination of defamatory material on the internet can rapidly reach a vast number of people and result in enduring repercussions. Those affected may endure emotional anguish, harm to their reputation, financial losses, or even face harassment and intimidation due to the defamatory remarks. Libel and slander are two types of cyber defamation.
2. Crime against property - This scenario closely resembles a real-life situation where a
criminal unlawfully obtains someone's bank or credit card information. The hacker acquires these details with the intention of accessing funds, conducting online purchases, or engaging in phishing scams to deceive individuals into revealing their personal information. Additionally, they may employ malicious software to infiltrate a webpage containing sensitive data. It includes property like credit cards or even intellectual property rights etc. 3 A. Credit card fraud – Credit card fraud under cyber law refers to the illegal use of credit card information obtained through various illicit means for financial gain or other malicious purposes. It involves unauthorized access to credit card data, manipulation of payment systems, or fraudulent transactions conducted online.
Fraudsters employ skimming devices to clandestinely capture credit card data during legitimate transactions, often at ATMs or point-of-sale terminals. B. Intellectual property crimes - Intellectual property crimes within the purview of cyber law encompass a range of illicit activities aimed at infringing upon the rights of creators, innovators, and owners of intellectual assets. These crimes leverage digital technologies and the internet to unlawfully access, reproduce, distribute, or monetize intellectual property without authorization. The most prevalent sort of IPR violation is software piracy, which includes copyright, trademark, patent, design, and service 3What Are the Types of Cyber Crimes Against Property, ezyLegal, https://www. ezylegal. in/blogs/what-are-thetypes-of-cyber-crimes-against-the-property. mark infringement, theft of computer source code, and so on. 4 C.
Hacking computer systems – Hacking computer systems is a prevalent form of cybercrime wherein unauthorized individuals or groups gain access to computer systems, networks, or data through illicit means. These hackers exploit vulnerabilities in software, hardware, or human factors to infiltrate systems for various malicious purposes. Hackers employ various techniques to gain unauthorized access to computer systems, such as exploiting software vulnerabilities, leveraging weak passwords, or using social engineering tactics to trick users into disclosing credentials. They use various methods to steal user credentials, such as key logging malware, credential phishing, or brute force attacks. D. Cyber vandalism - Cyber vandalism is the purposeful and malicious damage of digital property.
It mostly targets websites and other technological items, but it may also be used to harm persons or institutions. Cyber vandals may engage in data destruction activities, such as deleting files, corrupting databases, or wiping entire systems. This can result in significant financial losses, data breaches, or operational disruptions for individuals or organizations. They may target websites by altering their appearance, replacing content with offensive or political messages, or displaying digital graffiti. This can tarnish the reputation of the website owner, disrupt business operations, or spread misinformation.
3. Crime against an organization or society - Crimes against organizations or society in
the realm of cybercrime encompass a broad range of illicit activities perpetrated using digital technologies and the internet. These crimes target businesses, government entities, non-profit organizations, or society as a whole, resulting in financial losses, reputational damage, and societal harm. The unlawful acts of the fraudsters are aimed at harming the internet which can affect society as a whole including child pornography, online gambling, human trafficking etc. Crime perpetrated over the internet against a firm, organization, or government. The goal is to obtain the secret information of business and government agencies or bodies. These cyber-attacks are launched to threaten worldwide and national governments or private enterprises in order to extract 4 What Is Intellectual Property Theft? , Thales Group, https://cpl. thalesgroup.
com/software-monetization/whatis-intellectual-property-theft. a large sum of money from the institutions and cause terror among people, including cyber espionage, cyber terrorism, salami attacks, web jacking, virus assaults, etc. 5 A. Cyber terrorism - Cyber terrorism represents a grave threat that involves the use of digital technologies to perpetrate acts of violence, coercion, or disruption for ideological, political, or religious purposes. Unlike traditional forms of terrorism, cyber terrorism leverages the interconnected nature of the internet and computer networks to target critical infrastructure, government systems, or civilian populations which includes a wide range of activities like hacking, denial-of-service attacks, and information warfare, aimed at causing fear, chaos or harm on a larger scale.
Cyber terrorists target critical infrastructure, such as power grids, transportation systems, financial networks, healthcare facilities, or communication networks, to disrupt essential services, cause economic damage, or undermine public safety. They may also target government agencies, military installations, or political organizations to steal sensitive information, sabotage operations, or influence political outcomes. 6 B. Web jacking - Web jacking is a form of cybercrime where attackers gain unauthorized access to a website's administration controls or hosting platform to modify its content, redirect traffic, or steal sensitive information. It is an unconstitutional redirection of a user's browser from a trusted domain's page to a fictitious one without the user's knowledge.
The technique of Web Jacking allows people to visit any well-known or trustworthy website to be easily redirected to bogus ones, which in turn leads to the installation of malware, the dispersal of personal info, etc. Web jackers intend to illicitly collect the private data of users by enticing them to click on any link that appears genuine at first glance. C. Salami Attack - A salami attack in the context of cybercrime refers to a type of fraudulent activity where the perpetrator steals very small amounts of money from numerous transactions over time, with the intention of avoiding detection. It is a technique used to commit financial crimes online. One at a time, cybercriminals steal money or resources from financial accounts. The hacker or attacker manipulates 5Classification of Cyber Crime: Detailed Analysis, Aishwarya Sandeep, https://aishwaryasandeep.
in/classification-of-cyber-crime-detailed-analysis/. 6 Cyber Crimes and Its Classification, Studocu, https://www. studocu. com/in/document/gujarat-technologicaluniversity/cyber-crime-and-mitigation/cyber-crimes-and-its-classification/67695934. systems or processes to skim off tiny fractions of money from financial transactions, investments, or other monetary operations. These amounts are typically small enough to go unnoticed by individuals or systems responsible for monitoring financial activities. It is also compared with salami slicing which came from the idea of a thin slice of salami being taken from a larger piece, which is hardly noticeable on its own but can accumulate to a significant loss over time. D.
Cyber Espionage - Cyber espionage is a form of cybercrime that involves the unauthorized acquisition, theft, or exploitation of sensitive information, intellectual property, or trade secrets from individuals, organizations, or governments for strategic, economic, or political gain. Cyber espionage targets a wide range of entities, including government agencies, military organizations, defense contractors, corporations, research institutions, and individuals holding sensitive positions or access to valuable information. Attackers may have diverse motives, including geopolitical interests, economic competitiveness, or ideological agendas. 7 In addition to the above-mentioned crime, there are several other prevalent cybercrimes that pose significant threats to individuals, organizations, and society as a whole. They are –
1. Phishing - Phishing is a prevalent form of cybercrime that involves the use of deceptive
tactics to trick individuals into disclosing sensitive information, such as login credentials, financial data, or personal details. It attacks individuals through email, text messages, phone calls, and other forms of communication. One common phishing technique involves sending deceptive emails that appear to come from a trusted source, such as a bank or a reputable company. These emails typically contain urgent messages or enticing offers designed to prompt recipients to click on embedded links or download attachments. Upon clicking the links or opening the attachments, victims may be directed to counterfeit websites that closely resemble legitimate ones, where they are prompted to enter sensitive information.
2. Identity theft - It is a prevalent form of cybercrime where individuals' personal
information like passwords, ID numbers, credit card numbers or social security numbers, is stolen and used for fraudulent purposes, such as accessing financial 7 Classification of Cybercrimes, Lawyers Club India, https://www.lawyersclubindia.com/articles/classificationof-cybercrimes--1484.asp. accounts, making unauthorized purchases, or applying for loans or credit cards in the victim's name. Identity thieves use deceptive emails, messages, or websites to trick individuals into disclosing their personal information, such as login credentials, account numbers, or Social Security numbers. Cybercriminals may intercept data transmitted over unsecured Wi-Fi networks, such as public hotspots or unprotected home networks, to capture sensitive information, such as login credentials or financial details, from unsuspecting users.8
3. Denial of service attack (DoS) - It's a cyber-attack on a computer or other system that
prevents the legal user from accessing it; they aim the attack in this way that the system crashes. This cost the corporate world millions of rupees to use their own system to prevent these kinds of attacks. In a DoS attack, perpetrators use various techniques to exhaust the target's resources, such as bandwidth, server capacity, or network infrastructure, rendering it inaccessible to legitimate users. DoS attacks can result in financial losses for businesses due to downtime, lost revenue, or reputational damage. DoS attacks can tarnish the reputation of organizations targeted by attackers, leading to loss of customer trust, brand damage, and diminished market competitiveness. 9
4. Cyber Pornography or Child Pornography - Any content that contains sexual images
or videos of any child or any individual in which they are sexually exploited and not wearing clothes, published, distributed, imported, displayed or shared with anyone, using the internet, is referred to as cyber pornography. Usually children become the victims of this when their pictures are captured and inappropriately posted on the internet.
5. Cyber Stalking - Cyberstalking is a serious form of cybercrime that involves the use
of digital communication technologies to harass, intimidate, or monitor individuals without their consent. The stalkers exploit various online platforms, social media networks, messaging apps, or email to harass their victims, instill fear, or exert control over their lives. Direct communication is not always necessary for cyberstalking to occur, and some victims might not even be aware that they are being followed online. Numerous techniques can be employed to keep an eye on the victims, and the data 8 Cyber Crime in India: An Overview, Legal Service India, https://www. legalserviceindia. com/legal/article- 4998-cyber-crime-in-india-an-overview. html. 9 Types of Cybercrime, Panda Security, https://www. pandasecurity. com/en/mediacenter/types-of-cybercrime/. collected can subsequently be utilized to commit crimes like identity theft.
Some stalkers even go so far as to contact the victims' friends and harass them offline. To safeguard ourselves from all these above-mentioned cybercrimes one must follow the safety measure like –
1 Strong Passwords
One should create complex passwords for online accounts, including a combination of letters, numbers, and special characters that no hacker can crack.
2 Two-Factor Authentication (2FA)
Enable two-factor authentication wherever possible to add an extra layer of security to online accounts. 2FA requires users to provide a secondary form of verification, such as a code sent to their mobile device, in addition to their password.
3 Be Cautious of Suspicious Links and Attachments
Exercise caution when clicking on links or downloading attachments from unknown or untrusted sources, especially in emails, messages, or social media posts. We must verify the legitimacy of the before clicking, and use antivirus software to scan attachments for malware.
4. We must back up important files, documents, and data regularly to an external hard
drive, cloud storage service, or other secure location. In the event of a cyber-attack or data breach, having backups can help restore lost or corrupted data.
5. One should educate themselves about the common cyber scams, such as phishing,
malware, and identity theft, and learn to recognize the warning signs of suspicious activity online. Be skeptical of unsolicited emails, messages, or phone calls requesting personal information or payment.
6. An individual should be mindful of the information shared online and avoid oversharing
personal details, such as home addresses, phone numbers, or financial information, on social media. Review and adjust privacy settings on social media platforms to control who can access personal information.10 10 What Is Cyber Crime? Types, Examples, and Prevention, CyberTalents, https://cybertalents.com/blog/what-iscyber-crime-types-examples-and-prevention.
Conclusion
Cybercrime comprises a wide range of unlawful acts carried out using digital technology, networks, and communication channels. Cybercrimes, which range from financial fraud and identity theft to cyber espionage and online harassment, pose substantial risks to individuals, organizations, and society as a whole. Understanding the different types of cybercrime is critical for designing effective prevention, detection, and mitigation measures to tackle these changing threats. Individuals and organizations can enhance their defenses against cyber threats and lower their vulnerability to cybercrime by implementing proactive security measures such as robust password management, regular software updates, and user awareness training.
Furthermore, collaboration between law enforcement agencies, government bodies, cyber security professionals, and industry players is critical for combating cybercrime at both the national and international levels. We can all work together to create a safer and more secure digital world by increasing awareness, implementing preventive measures, and cultivating a cyber-security awareness and resilience culture.