Notes on Cybercrime and Responses

Session Overview

  • Aim: Provide comprehensive overview of cybercrime
  • Focus Areas:
  • Definitions of cybercrime
  • Types of cybercrime
  • Forms of cybercrime: Financial, personal, political
  • Responses to cybercrime: Governmental regulation, technical innovation

Concept of Cybercrime

  • Definition: Criminal activities carried out using computers or the internet.
  • Key Types:
  • Hacking
  • Unauthorised access to systems
  • Data theft
  • Cyberbullying
  • Malware distribution
  • Online financial fraud
  • Impact: Serious repercussions for individuals, organizations, and national security.

Characteristics of Cyberspace

  • Features:
  • Interconnectivity and interdependencies
  • Borderless nature
  • Anonymity for users
  • Constantly online environment

Types of the Web

  1. Surface Web: 5% of internet content, indexed by search engines.
  2. Deep Web: 90% of content, not indexed, includes private information (e.g., emails, banking).
  3. Dark Web: 5% of content within the deep web, accessed via Tor, used for both legal and illegal activities.

Types of Cybercrime

Cyber-dependent Crimes
  • Offences committed solely using a computer or networks (e.g., hacking).
Cyber-enabled Crimes
  • Traditional crimes transformed by internet use (e.g., online fraud).
Areas of Cybercrime

  • Financial Cybercrime: E.g., online fraud, ransomware, data breaches.

  • Social Engineering: Tactics used to trick victims into disclosing information, usually in four steps:

    1. Gathering information
    2. Relationship development
    3. Exploiting vulnerabilities
    4. Execution of fraud

  • Personal Cybercrime: Includes:

  • Cyberbullying: Online abuse and humiliation.

  • Cyberstalking: Unwanted digital surveillance and harassment.

  • Psychological effects include anxiety and reputational damage.

  • Political Cybercrime: Examples include:

  • Hacktivism: Activism via cyberattacks.

  • State-sponsored cyberattacks: Espionage or interference by governments.

  • Information warfare: Use of misinformation, deepfakes to manipulate public opinion.

Role of Generative AI in Cybercrime

  • AI Impact: Automating cybercrime, creating deepfakes for scams.
  • Examples of Criminal Applications:
  • Deepfake Misinformation: Creating false narratives through fake videos.
  • AI-generated scams: Mimicking voices in phishing attacks.
  • Automated Cyberattacks: Enhanced hacking capabilities.

Case Study: Hong Kong Bank AI Deepfake Scam

  • Cybercriminals impersonated a bank executive using AI-generated voice.
  • Resulted in a $25 million fraudulent transfer.
  • Significance raises concerns about AI misuse in security measures.

Deepfake Revenge Porn

  • Definition: Use of AI to create non-consensual explicit images/videos.
  • Issues: Spreading of fake content, assaulting victims’ reputations.
  • Ethical and Legal Challenges: Diverse laws on deepfake content, weak enforcement.

Governmental Regulation

  • Overview: UK’s regulatory framework to combat cybercrime:
  • Computer Misuse Act 1990: Unauthorized access criminalized.
  • Data Protection Act 2018: Data protection standards set.
  • Investigatory Powers Act 2016: Broad surveillance powers for national security.
  • Online Safety Act 2023: Regulatory framework for online content.
  • International Cooperation: Budapest Convention aims to harmonize laws.

Technical Regulation

  • Filtering and Blocking: Strategies to manage harmful online content.
  • Challenges: Risk of censorship, over-blocking, and evasion via VPNs.

Other Challenges in Cybercrime Management

  • Coordination needed between public and private sectors.
  • Difficulty in investigations due to lack of standardized laws and communication.
  • Deterrent effects of cybercrime are minimal; societal disconnect from online harms.

Solutions and Preventive Measures

  • Enhanced content moderation and reporting mechanisms.
  • Increased privacy controls.
  • Public Awareness Campaigns: Educating the populace on cybercrime dangers.

Conclusion

  • Key definitions, types, and response strategies to cybercrime are crucial for a comprehensive understanding.
  • Importance of laws, regulations, and technical measures in combating cybercrime.