TY - GEN
T1 - Computer-supported cooperative crime
AU - Garg, Vaibhav
AU - Afroz, Sadia
AU - Overdorf, Rebekah
AU - Greenstadt, Rachel
N1 - Publisher Copyright:
© International Financial Cryptography Association 2015.
PY - 2015
Y1 - 2015
N2 - This work addresses fundamental questions about the nature of cybercriminal organization. We investigate the organization of three underground forums: BlackhatWorld, Carders and L33tCrew to understand the nature of distinct communities within a forum, the structure of organization and the impact of enforcement, in particular banning members, on the structure of these forums. We find that each forum is divided into separate competing communities. Smaller communities are limited to 100–230 members, have a two-tiered hierarchy akin to a gang, and focus on a subset of cybercrime activities. Larger communities may have thousands of members and a complex organization with a distributed multi-tiered hierarchy more akin to a mob; such communities also have a more diverse cybercrime portfolio compared to smaller cohorts. Finally, despite differences in size and cybercrime portfolios, members on a single forum have similar operational practices, for example, they use the same electronic currency.
AB - This work addresses fundamental questions about the nature of cybercriminal organization. We investigate the organization of three underground forums: BlackhatWorld, Carders and L33tCrew to understand the nature of distinct communities within a forum, the structure of organization and the impact of enforcement, in particular banning members, on the structure of these forums. We find that each forum is divided into separate competing communities. Smaller communities are limited to 100–230 members, have a two-tiered hierarchy akin to a gang, and focus on a subset of cybercrime activities. Larger communities may have thousands of members and a complex organization with a distributed multi-tiered hierarchy more akin to a mob; such communities also have a more diverse cybercrime portfolio compared to smaller cohorts. Finally, despite differences in size and cybercrime portfolios, members on a single forum have similar operational practices, for example, they use the same electronic currency.
KW - Cybercrime
KW - Dunbar number
KW - Economics
KW - Social network analysis
UR - http://www.scopus.com/inward/record.url?scp=84949954806&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84949954806&partnerID=8YFLogxK
U2 - 10.1007/978-3-662-47854-7_3
DO - 10.1007/978-3-662-47854-7_3
M3 - Conference contribution
AN - SCOPUS:84949954806
SN - 9783662478530
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 32
EP - 43
BT - Financial Cryptography and Data Security - 19th International Conference, FC 2015, Revised Selected Papers
A2 - Okamoto, Tatsuaki
A2 - Bohme, Rainer
PB - Springer Verlag
T2 - 19th International Conference on Financial Cryptography and Data Security, FC 2015
Y2 - 26 January 2015 through 30 January 2015
ER -