If ranking the motives behind cybercrime from 1 (making the most sense) to 7 (making the least sense) I would list them:
- Multiple Reasons: The more that someone has to gain from committing a crime the more tempting that crime will be. If you feel slighted by the policy of a politician and can hold their campaign site for ransom, then doing so will be very attractive. In one cyberattack you can fulfill political, monetary, and political gains all at once. So, the more motives behind a cybercrime the more it makes sense.
- Money: Simply, money is one of the most common factors behind most crimes. If you steal from a bank, if you run a fraud scheme, if you commit tax fraud it all stems from a desire to gain money. Even violent crimes such as murder can be monetarily motivated due to life insurance or inheritance. Many cybercrimes are just using computers to commit already existing crimes. Stealing data is just theft from a network, hacking is essentially digital breaking and entering, and a ransomware attack is just holding a network or data as a hostage instead of a person or physical item of value. So if all these other crimes are motivated by money, why would cybercrime be any different?
- Revenge: Outside of money, I feel emotions are the next most logical motive for crime. This is where we find crimes of passion, assault, destruction of property, etc. There is nothing financial to gain necessarily you just want to harm or upset a person in some manner. So in cybercrime, this could mean leaking a personal photo from their device, hacking their social media accounts, and blocking their access to banking accounts. The goal is simply to make the target miserable.
- Political: With the political climate of recent years I feel that political motivations have become more and more logical. There is a lot of anger and divisiveness in modern politics. There is a lot of demonization of those of opposing views. I also feel there is a growing sense that an individual has very little power by simply voting due to believed corruption or the weakness of the election process. This is pushing some individuals to criminal means of having more power over political outcomes. Just in recent years, we’ve seen riots, plotted kidnappings of politicians, politicians having homes broken into, public harassment of political figures, and even multiple assassination attempts. Disenchanted people are looking to take power into their own hands, so in cybercrime terms, this could be DDoS on a campaign site, hacking a politician’s device trying to find something incriminating, or a disinformation campaign. It can grant a person a much greater impact than simply voting.
- Recognition: People have gone to great extremes for fame for centuries, but attention can be gained in many other ways, which don’t include committing a cybercrime which could have serious consequences, but then again recognition among peers can have a powerful impact on the brain. Being able to brag “Hey I took down Amazon’s website!” could come with prestige if someone is part of a hacker group.
- Entertainment: I feel this motive makes less sense today than it would have a few decades ago. Cybersecurity and hacking can be a fascinating topic, I mean I wouldn’t be in this course if I didn’t find it interesting. In the early days of the internet, there weren’t legal and safe avenues to explore these topics, which is why I think we saw a lot of grey-hat hackers in those times. Now there are wargames, HacktheBox, OvertheWire, and many often resources to ethically explore hacking as a hobby.
- Boredom: Finally boredom is the least logical motive for cybercrime because I feel boredom as a motive implies a sense of impulsivity and spur-of-the-moment behavior. Carjacking to go for a joyride, running off with candy from a gas station, and stealing an unattended bike you happen to walk by are crimes I feel could be attributed to boredom. I feel there is little more work and effort needed to put into cybercrime to attribute it to boredom.