UNIT 3: CYBER CRIME, LEGAL FRAMEWORKS, AND COUNTERMEASURES
I. FOUNDATIONS OF CYBER CRIME
Definition and Concept
-
Cyber Crime: Any illegal activity involving a computer, network, or the internet. It can be the tool, target, or subject of the crime.
-
Cybercrime vs. Traditional Crime:
-
Borderless: No geographical boundaries.
-
Anonymity: Perpetrator can hide identity.
-
Digital Evidence: Evidence is intangible, volatile, and easily altered.
-
Scale & Speed: Can affect millions instantly.
-
Low Risk, High Reward: Often perceived as low chance of getting caught.
-
Challenges of Cyber Crime
-
Jurisdiction: Determining which country's laws apply.
-
Attribution: Proving who committed the act (use of proxies, botnets).
-
Evidence: Collection, preservation, and admissibility of digital evidence.
-
Rapid Evolution: Laws and defenses lag behind technology.
-
Lack of International Harmonization: Differing national laws.
Classification/Taxonomy of Cyber Crimes
| Category | Against Persons | Against Property | Against Society | Against Government/State |
|---|---|---|---|---|
| Examples | Cyberstalking, Harassment, Defamation, Email Abuse | Software Piracy, Data Theft, Vandalism, Internet Time Theft | Spamming, Phishing, Fraud, Cyber Pornography | Cyber Terrorism, Hacking, Denial of Service (DoS) |
Evolution and Trends
-
Drivers: Proliferation of Internet, Mobile Devices, IoT (Internet of Things).
-
Trends: Shift from vandalism to financially motivated attacks; rise of Ransomware-as-a-Service (RaaS); state-sponsored attacks; targeting of critical infrastructure.
II. CYBER CRIMINALS AND THEIR MOTIVATIONS
Profiles and Characteristics
| Type | Motivation | Key Characteristics |
|---|---|---|
| White Hat | Ethical; find vulnerabilities to fix them. | Legitimate security professionals, "ethical hackers". |
| Black Hat | Personal gain, fame, malice. | Malicious hackers, steal data, cause damage. |
| Grey Hat | Mix of good/bad; may expose flaws without permission. | Operate in ethical gray area. |
| Script Kiddie | Thrill, recognition, low skill. | Use pre-built tools, lack deep understanding. |
| Teenage Web Vandals | Thrill, peer recognition, rebellion, curiosity. | Often juveniles; psychological factors: ego, power, thrill. |
| Organized Crime | Financial profit (primary motive). | Structured groups, sophisticated, run like businesses. |
| Insurgents/Extremists | Political/Ideological goals. | Disrupt services, spread propaganda, espionage. |
General Attack Lifecycle (Cyber Kill Chain)
-
Reconnaissance: Research target.
-
Weaponization: Couple exploit with backdoor.
-
Delivery: Transmit weapon (email, USB, etc.).
-
Exploitation: Trigger vulnerability.
-
Installation: Install malware.
-
Command & Control (C2): Establish remote control.
-
Actions on Objectives: Achieve goal (data exfiltration, destruction).
III. SPECIFIC CYBER CRIME TECHNIQUES & ATTACKS
Unauthorized Access & Intrusion
-
Hacking: Unauthorized intrusion into a system/network.
- Web Server Hacking: Exploiting vulnerabilities (e.g., SQL Injection, XSS, Buffer Overflow) to gain control/access data.
-
Password Sniffing:
-
Packet Sniffing: Capturing network packets to read unencrypted passwords.
-
Man-in-the-Middle (MITM): Intercepting communication between two parties.
-
-
Web Jacking: Taking control of a user's browser session by hijacking the session token (e.g., via XSS, network sniffing). Attacker redirects user to a fake site.
-
Session Hijacking: Exploiting a valid computer session to gain unauthorized access. Steals session cookie/token.
Deception and Identity-Based Attacks
-
Email Spoofing: Forging email headers to make an email appear from a legitimate source. Mechanism: Manipulates
From,Return-Pathfields.-
Impact: Phishing, reputation damage.
-
Difference from Spamming: Spamming is sending bulk unsolicited emails; spoofing is the technique to hide sender's identity.
-
-
Phishing: Fraudulent attempt to steal sensitive info by masquerading as trustworthy entity.
-
Spear Phishing: Targeted, personalized.
-
Whaling: Targets high-level executives ("big fish").
-
-
Social Engineering: Manipulating people into divulging confidential info (e.g., pretexting, baiting, quid pro quo).
Denial of Service (DoS/DDoS)
| Feature | DoS (Denial of Service) | DDoS (Distributed DoS) |
|---|---|---|
| Source | Single system/attacker. | Multiple compromised systems (Botnet). |
| Scale | Limited, easier to block. | Massive, harder to mitigate. |
| Objective | Overwhelm target's resources (CPU, memory, bandwidth). | Same, but with greater volume and distributed sources. |
| Impact | Service unavailability, financial loss, reputational damage. |
Malicious Software (Malware)
| Type | Propagation | Key Function |
|---|---|---|
| Virus | Requires host program; user action (execute file). | Attaches to clean files; replicates. |
| Worm | Self-replicating; exploits vulnerabilities to spread automatically. | Consumes bandwidth, creates botnets. |
| Trojan Horse | Disguised as legitimate software; user must install. | Provides backdoor, steals data. |
| Spyware | Often bundled with software. | Secretly monitors user activity. |
| Keylogger | Type of spyware; can be software/hardware. | Records every keystroke to capture credentials. |
Fraud and Financial Crimes
-
Online Fraud: General term for deceit via internet (auction fraud, investment scams).
-
Salami Technique: Slicing off small amounts (like salami slices) from many accounts. E.g., deducting 5 paise from every customer's account monthly.
-
Credit Card Fraud & Identity Theft: Stealing financial data for unauthorized transactions.
Content & Communication-Based Crimes
-
Spamming: Sending bulk unsolicited messages (Email, SMS, Social Media). Impact: Clogs networks, phishing vector, productivity loss.
-
Cyber Defamation & Harassment: Publishing false statements/abusive content online to harm reputation. Email Abuse includes sending threatening/obscene emails.
-
**Cyber Pornography