Abstract:The rapid proliferation of cyberthreats necessitates a robust understanding of their evolution and associated tactics, as found in this study. A longitudinal analysis of these threats was conducted, utilizing a six-year data set obtained from a deception network, which emphasized its significance in the study’s primary aim: the exhaustive exploration of the tactics and strategies utilized by cybercriminals and how these tactics and techniques evolved in sophistication and target specificity over time. Different cyberattack instances were dissected and interpreted, with the patterns behind target selection shown. The focus was on unveiling patterns behind target selection and highlighting recurring techniques and emerging trends. The study’s methodological design incorporated data preprocessing, exploratory data analysis, clustering and anomaly detection, temporal analysis, and cross-referencing. The validation process underscored the reliability and robustness of the findings, providing evidence of increasingly sophisticated, targeted cyberattacks. The work identified three distinct network traffic behavior clusters and temporal attack patterns. A validated scoring mechanism provided a benchmark for network anomalies, applicable for predictive analysis and facilitating comparative study of network behaviors. This benchmarking aids organizations in proactively identifying and responding to potential threats. The study significantly contributed to the cybersecurity discourse, offering insights that could guide the development of more effective defense strategies. The need for further investigation into the nature of detected anomalies was acknowledged, advocating for continuous research and proactive defense strategies in the face of the constantly evolving landscape of cyberthreats.

Applying Routine Activity Theory to Cybercrime: A Theoretical and Empirical Analysis

A Systematic Literature Review of Routine Activity Theory’s Applicability in Cybercrimes

Careful When You Click? How the Dark Triad of Personality Can Influence the Likelihood of Online Crime Victimization

A Routine Activity Approach to Understand Cybergrooming Victimization Among Adolescents from Six Countries

Cybercrime in America amid COVID-19: the Initial Results from a Natural Experiment

Comparing Victims of Phishing and Malware Attacks: Unraveling Risk Factors and Possibilities for Situational Crime Prevention

Phishing for suitable targets in the Netherlands: routine activity theory and phishing victimization

Exploring Cybercriminal Activities, Behaviors and Profiles

Telecommunication and cyber fraud victimization among Chinese college students: An application of routine activity theory

Cyberpsychology: A Longitudinal Analysis of Cyber Adversarial Tactics and Techniques

Cybercrime Risk Found in Employee Behavior Big Data Using Semi-Supervised Machine Learning with Personality Theories

To Change Or To Stick: Unveiling The Consistency Of Cyber Criminal Signatures Through Statistical Analysis

Towards Effective Cybercrime Intervention

Explaining Victim Impact from Cyber Abuse: An Exploratory Mixed Methods Analysis

Determinants of reporting cybercrime: A comparison between identity theft, consumer fraud, and hacking

The Art of Cybercrime Community Research

Victims rational decision: A theoretical and empirical explanation of dark figures in crime statistics

Analysing the cultural dimensions of cybercriminal groups -- A case study on the Conti ransomware group

Characterizing Online Vandalism: A Rational Choice Perspective

Individual and Contextual Variables of Cyber Security Behaviour -- An empirical analysis of national culture, industry, organisation, and individual variables of (in)secure human behaviour

Help, I need somebody: Examining the antecedents of social support seeking among cybercrime victims