This document discusses cybercrimes and cybercriminals. It defines cybercrime as a computer-oriented crime that threatens privacy, security and reliability in the virtual world. Some common cybercrimes include cyberbullying, cyber extortion, phishing, identity theft, and different types of online scams. The document also categorizes cybercriminals and hackers, distinguishing between non-professionals like script kiddies, social workers like hacktivists, professionals like white hat and red hat hackers, and criminals like cyber terrorists and black hat hackers. Insider threats from current and former employees are also addressed. Different hacking techniques like social engineering are outlined.

1. A. B. M. Ashikur Rahman
Asst. Professor,
Dept. of CSE, IUT
Cybercrimes
and
Cybercriminals

2. Comparison
• Real world is more lively.
• In virtual world, we can feel
but can not touch
• Most of the case, computer
simulation needed for virtual
world
Real world Vs Virtual world

3. Cybercrimes
Definitions:
Crime:
• Action against Law
• unlawful act punishable by a state or other authority.
Cybercrime:
• Fastest growing area of crime (INTERPOL)
• computer oriented crime
• A threat to the privacy, security and reliability of someone in virtual world

4. Cybercrimes
Tools & Methods:
• Social Engineering
• Malwares(Malicious softwares)
• Virus
• Worms
• Spyware
• Trojan Horse
• Ransomware
• Adware
• Scareware etc.

5. Cybercrimes
Categories:
• Cyberbullying
• Cyber Extortion
• Phishing
• Identity Theft
• Scamming
• Cyberlaundering
• Copyright Infringement
• DDoS Attack
• Prohibited offensive and illegal content
• Others

6. Cybercrimes
Cyberbullying
• Bullying is a form of aggressive behavior manifested by the use of force or coercion
to affect others, particularly when the behavior is habitual and involves an imbalanc
e of power.
• It can include-
• verbal harassment,
• physical assault or coercion
• Harassment on grounds of race, religion, gender, sexuality, or ability
• Cyber-bullying is any bullying done through the use of technology.

7. Cybercrimes
Cyberbullying
Real World
Virtual World

8. Cybercrimes
Cyber Extortion
• More likely kidnapping and blackmailing
in real world
• Attacker use Malware (ransomeware) to
gain control over data
• Encrypt or copy data, image, files and
threaten to destroy or reveal
• Give access in exchange of money
• Most of the time they take virtual money
like bilcoin.

9. Cybercrimes
Phishing & Identity Theft

10. Cybercrimes
Phishing & Identity Theft
• Also known as e-mail spoofing
• Fake e-mail source
• Ask for sensitive information
• Use those info to commit crime like-
• Identity theft
• Credit card theft
• Spread rumors
• Fraud etc.

11. Cybercrimes
Identity Theft
If a criminal steals your identity, they may use it to:
• trick your bank or financial institution into giving them access to your money and other accounts,
• open new accounts and build up debts in your name which can ruin your credit rating,
• take control of your accounts, including by changing the address on your credit card or other accounts
so you don’t receive statements and don’t realize there is a problem,
• open a phone, internet or other service account in your name,
• claim government benefits in your name,
• lodge fraudulent claims for tax refunds in your name and preventing you from being able to lodge your
legitimate return,
• use your name to plan or commit criminal activity, and
• Pretend to be you to embarrass or misrepresent you, such as through social media

12. Cybercrimes
Scamming
• Very similar to phishing
• Happens a lot in our country
• To cheat, attacker uses bait like
• Lottery winning scam
• New job offer
• Unintentional money transfer
• Fake news to collect money from friends

13. Cybercrimes
Cyberlaundering
• Money laundering 2.0
• Re-routes money through online banking
• Illegitimate money becomes real money
• Exactly like real world money laundering but uses technology

14. Cybercrimes
Copyright Infringement
• Making copy of some intellectual property without the permission of t
he owner (piracy)
• Example:
• YouTube video
• Kickass torrent

15. Cybercrimes
DDoS Attack
• an interruption of service resulting from system unavailability
• prevents any part of a target system from functioning as planned
• Create millions of service request
to create congestion
• It actually used to harm some
organization
•HSBC Attack
•GitHub Repository

16. Cybercrimes
Prohibited offensive and illegal content
Prohibited offensive content includes:
• depiction of actual sexual activity between adults
• videos showing very high-impact violence
• footage detailing offensive sexual practices
• material providing detailed instruction in crime

17. Cybercrimes
Others:
• Online gambling
• Issues in online trading
• Spreading fake news
• Spreading rumors
• Cyber defamation

18. Hackers
• basically refer to any skilled computer programmer
• a person who, with their technical knowledge, uses bugs or exploits to break into computer
systems.
• Motives:
1. monetary gain, especially when it involves breaking into systems with the specific purpose of
stealing credit card numbers or manipulating banking systems.
2. egoistic motives; to increase their reputation within the hacker subculture, leaving their signatures
on the system or network after a breach.
3. corporate spies allow organizations to possess information on services and products that may be
hijacked or used as a leverage within the marketplace.
4. some hackers do it for patriotic reasons; as in state-sponsored cyber attacks during wartime.

19. Hackers: Categories
Non-professionals:
• Blue Hat Hacker
• Script Kiddie
• Green Hat Hacker
Social Workers:
• Grey Hat Hacker
• Hactivists
Professionals:
• White Hat Hacker
• State/Nation Sponsored Hackers
• Elite Hackers
• Red Hat Hacker
Criminals:
• Cyber Terrorists
• Black Hat Hacker
• Social Engineering Hackers
• Malicious Insider/Whistle-blower Hacker

20. Script Kiddies:
• This refers to the newbies.
• They don’t cause excessive damage.
• They use downloaded hacking software or purchased scripts to bombard traffic sites or si
mply disrupt the regular activity of a website.
Non-professionals
• Blue Hat Hackers (Amateurs):
• ill motives such as revenge attacks.
• Green Hat Hackers:
• Tutorial Learners

21. Black Hat Hackers
• Known as “Crackers”
• Bad guy who is a intruder to the system
• Main motive is to gain access to some valuable
resource
• Sometimes, motive is reputation

22. Career Criminals
• Computer experts lured by the profit of cybercrimes
• Works on Darknet to continue their crime
• Always look for bigger scores
• Organized and quick
• break into computer systems to stir up violence
Cyber Terrorist

23. Insiders & Ex-employee
• At the beginning, most of the attack was carried out by in-house employees
• Insiders know pros and cons of the system
• Easy to gain some unauthorized access
• Ex-employees have motive
• They have no strings attached
Whistle-blower Hacker

24. Social Engineering Hackers
-uses psychological manipulation to make people to divulge private contents
Example:
bKash frauds
Techniques used:
Phishing, Vishing, Smishing, Impersonation, baiting
Target:
- Gain trust of the victim
- Obtain sensitive information
- Use the victim to perform specific action

25. Social Workers
Hacktivists:
• Mixture of pure hacking and activism
• Hacktivists are conscious hackers with a cause
• carry out their activism in an electronic form
• Example-
• Environment Campaign
• “Reform Quota System” strike
Gray hat Hackers:
• exploit the internet systems only to make public
certain vast datasets of information that would
be of benefit to everyone
• Example-
• Panama Papers (John Doe)
• WikiLeaks

26. Professionals
Red Hat Hackers:
• find black hat hackers, intercept and destroy
their schemes
• Employed by the govt. agencies
• can be a free lancer too.
Elite Hackers:
• the “cutting-edge geniuses”.
• the real experts and the innovators in the field of
hacking
• Legends in their fields
• Top of the hacker chain
• Sometimes work as consultants

27. Political or Commercial Group
• Want to fulfill their agenda
• Backed up by higher authority, sometimes Governments
• Example:
• Israel’s attack on Iran’s Nuclear plant using “STUXNET”
State/Nation Sponsored Hackers

28. State/Nation Sponsored Hackers

29. • Known as “White Hat Hackers”
• know how to find and exploit vulnerabilities and weaknesses in systems
• uses those skills in a legitimate, lawful manner to try to find vulnerabilities
and fix them
• More likely penetration tester
• there’s even a professional certification for ethical hackers: the Certified
Ethical Hacker (CEH).
White Hat (Ethical) Hackers

30. Thank You