RT Article T1 Cybercriminal networks, social ties and online forums: social ties versus digital ties within phishing and malware networks JF The British journal of criminology VO 57 IS 3 SP 704 OP 722 A1 Leukfeldt, E. R. 1982- A2 Kleemans, Edward R. 1967- A2 Stol, Wouter 1958- LA English YR 2017 UL https://krimdok.uni-tuebingen.de/Record/1565231465 AB Online forums serve as offender convergence settings for cybercriminals, but it is unknown whether all cybercriminal networks use forums. Important questions are how cybercriminals meet, how cybercriminal networks develop and what this means for the criminal capabilities of these networks. To gain insight into these questions, we analysed 18 criminal investigations into phishing and malware networks and developed four models of growth. Social ties still play an important role in the origin and growth of the majority of networks. Forums, however, also play a significant role in a number of networks, for example, to find suitable co-offenders or to get into contact with enablers. Criminals with access to forums are able to increase criminal capabilities of their network relatively quickly. K1 Cybercrime K1 Criminal networks K1 Social opportunity structure K1 Online forums, K1 Phishing K1 Online banking K1 Internetkriminalität K1 Onlineforum DO 10.1093/bjc/azw009