Cybercrime

Permanent URI for this collectionhttps://hdl.handle.net/10125/107508

Browse

Recent Submissions

Now showing 1 - 4 of 4
  • Item type: Item ,
    The Effects of Dark Triad Traits and Perceived Law Enforcement Competence in Responding to Ransomware Attacks
    (2024-01-03) Luu, Truong (Jack); Jones, Michael; Samuel, Binny
    This research investigates a largely unexamined psychological element in ransomware attacks, a prevalent form of cybercrime, focusing on how Dark Triad personality traits (narcissism, Machiavellianism, and psychopathy) influence victim responses. Traditional responses to ransomware include paying the ransom, abandoning the data/files, and/or reporting the issue to law enforcement. We look at the interaction between these traits and responses. Using a scenario-based survey, we have collected data from 287 participants so far to unearth the relationship between these factors and individual responses to this cybercrime. Such understanding can potentially inform personalized cyber threat prevention strategies, ultimately enhancing cybersecurity research. The paper also examines the implications of its findings for both research and practice.
  • Item type: Item ,
    Understanding Leadership Competencies in Cyber Crisis Management: Insights from the Maersk Global Supply Chain Meltdown
    (2024-01-03) Abbatemarco, Nico; Salviotti, Gianluca; D'Ignazio, Chiara; De Rossi, Leonardo Maria
    In today's rapidly evolving digital landscape, organizations face an increasing threat from cyber-attacks and the resulting cyber crises. This paper focuses on the management of such crises, specifically examining the case study of the NotPetya cyber-attack that hit Maersk, a global shipping company, in 2017. Through the analysis of qualitative data and utilizing a Narrative Inquiry approach, this study aims to deepen the understanding of the leadership competencies required to effectively navigate and mitigate the impact of cyber crises. By emphasizing competencies such as sense-making, perspective-taking, and risk-taking in the immediate aftermath of an attack, this paper contributes to the growing body of knowledge in the field of cyber crisis management. Additionally, the paper highlights the crucial role played by leaders in leveraging the organization's external network to establish end-to-end cyber resilience across the supply chain.
  • Item type: Item ,
    Conceal or Communicate? Organizational Notifications to Stakeholders Following Ransomware Attacks
    (2024-01-03) Cram, W. Alec; Chan, Albert; Yuan, Jonathan; Joo, Dennis
    Ransomware attacks have become an unrelenting frustration for organizations of all sizes, industries, and locations. Although past research has examined how ransomware attacks can be more effectively prevented, little attention has been paid to understanding how organizations communicate with stakeholders. In contrast to some cyber incidents that remain hidden for months, ransomware attacks render systems inoperable immediately, which often requires a unique stakeholder response strategy. Drawing on principles from stakeholder theory and crisis response strategies, we examine the organizational communications following 101 ransomware attacks. Our results indicate that stakeholder notifications tend to be either customer-focused or investor-focused, but are rarely both. We also find that most notifications contain at least a basic level of detail, but that about one in ten communications are insufficiently informative. This work extends the field’s understanding of cybersecurity incident notifications within the unique context of ransomware attacks and reveals practical insights for cybersecurity managers.
  • Item type: Item ,
    Introduction to the Minitrack on Cybercrime
    (2024-01-03) Hamari, Juho; Gehl, Robert; Siuda, Piotr; Harviainen, J. Tuomas