RT Article
T1 A typology of cybercriminal networks: from low-tech all-rounders to high-tech specialists
JF Crime, law and social change
VO 67
IS 1
SP 21
OP 37
A1 Leukfeldt, E. R. 1982-
A2 Kleemans, Edward R. 1967-
A2 Stol, Wouter 1958-
LA English
YR 2017
UL https://krimdok.uni-tuebingen.de/Record/1853780006
AB Case studies show that there are at least two types of groups involved in phishing: low-tech all-rounders and high-tech specialists. However, empirical criminological research into cybercriminal networks is scarce. This article presents a taxonomy of cybercriminal phishing networks, based on analysis of 18 Dutch police investigations into phishing and banking malware networks. There appears to be greater variety than shown by previous studies. The analyzed networks cannot easily be divided into two sharply defined categories. However, characteristics such as technology use and offender-victim interaction can be used to construct a typology with four overlapping categories: from low-tech attacks with a high degree of direct offender-victim interaction to high-tech attacks without such interaction. Furthermore, clear differences can be distinguished between networks carrying out low-tech attacks and high-tech attacks. Low-tech networks, for example, make no victims in other countries and core members and facilitators generally operate from the same country. High-tech networks, on the contrary, have more international components. Finally, networks with specialists focusing on one type of crime are present in both low-tech and high-tech networks. These specialist networks have more often a local than an international focus.
NO Literaturverzeichnis: Seite 37
K1 Criminal networks
K1 Cybercrime
K1 Malware
K1 Organized Crime
K1 Phishing
K1 Theory
DO 10.1007/s10611-016-9662-2