Abstract:The rapid proliferation of cyberthreats necessitates a robust understanding of their evolution and associated tactics, as found in this study. A longitudinal analysis of these threats was conducted, utilizing a six-year data set obtained from a deception network, which emphasized its significance in the study’s primary aim: the exhaustive exploration of the tactics and strategies utilized by cybercriminals and how these tactics and techniques evolved in sophistication and target specificity over time. Different cyberattack instances were dissected and interpreted, with the patterns behind target selection shown. The focus was on unveiling patterns behind target selection and highlighting recurring techniques and emerging trends. The study’s methodological design incorporated data preprocessing, exploratory data analysis, clustering and anomaly detection, temporal analysis, and cross-referencing. The validation process underscored the reliability and robustness of the findings, providing evidence of increasingly sophisticated, targeted cyberattacks. The work identified three distinct network traffic behavior clusters and temporal attack patterns. A validated scoring mechanism provided a benchmark for network anomalies, applicable for predictive analysis and facilitating comparative study of network behaviors. This benchmarking aids organizations in proactively identifying and responding to potential threats. The study significantly contributed to the cybersecurity discourse, offering insights that could guide the development of more effective defense strategies. The need for further investigation into the nature of detected anomalies was acknowledged, advocating for continuous research and proactive defense strategies in the face of the constantly evolving landscape of cyberthreats.

Exploit Kits: The production line of the Cybercrime Economy

Economic Factors of Vulnerability Trade and Exploitation

Defense of Hidden Backdoor Technology for Web

The Botnet Revenue Model

Exploitation of Human Trust, Curiosity and Ignorance by Malware

The Cynicism of Modern Cybercrime: Automating the Analysis of Surface Web Marketplaces

Malware Finances and Operations: a Data-Driven Study of the Value Chain for Infections and Compromised Access

Analysis of Increasing Malwares and Cyber Crimes Using Economic Approach

Extended Security Risks in IP Networks

Malware and Exploits on the Dark Web

2001-2013: Survey and Analysis of Major Cyberattacks

Backstabber's Knife Collection: A Review of Open Source Software Supply Chain Attacks

An Exploit Kits Detection Approach Based on HTTP Message Graph

Botnet economics and devising defence schemes from attackers own reward processes

ExploitFlow, cyber security exploitation routes for Game Theory and AI research in robotics

Towards Effective Cybercrime Intervention

How to build a vulnerability benchmark to overcome cyber security attacks

An In Depth Analysis of a Cyber Attack: Case Study and Security Insights

Studying Malicious Websites and the Underground Economy on the Chinese Web

Cyberpsychology: A Longitudinal Analysis of Cyber Adversarial Tactics and Techniques

Automated Attack Synthesis for Constant Product Market Makers