Understanding Cybercrime Modus Operandi: Techniques, Psychological Tricks, and Countermeasures
Asian Journal of Research in Computer Science · pp. 234–251 · Published 27 Dec 2024
10.9734/ajrcos/2024/v17i12541Abstract
Cyber professionals and general users are still challenged on how to secure cyberspace and their related activities. The primary challenge remained difficulty in identifying the perpetrators of cybercrimes due to the anonymous nature of the internet and the use of sophisticated and stealthy techniques by attackers to hide their identities. The emergence of advanced crime in cyberspace such as Advanced Persistent Threats (APTs) unlike traditional cyberattacks, APTs are characterized by the use of stealthy tactics, including advanced evasion techniques and zero-day vulnerabilities, making them challenging to detect using conventional security measures. Therefore, this study aimed to explore the techniques, psychological tricks, technical tricks, and countermeasures using the two models of cyberattacking: cyber kill chain and cyberattacking process phase’s models. The study applied the Systematic Literature Review (SLR) and Autoethnography methods. The sample of 305 sent (replied) emails from the Yahoo account of the Author from 2012 to 2024. The OSINT techniques are used to verify the empirical validity of the 10 spammed message contents. The study found that in traditional phishing, the attack uses a combination of tricks such as false identity and financial lures, emotional manipulation and trust through divinity and love psychological tricks, involvement of the trusted figure usually the religious leaders, direct solicitation of personal information, urgency and action. In general, we conclude that phishers usually a combination of blended psychological and technical tricks to manipulate the recipient into providing personal information and facilitating the scam. Notably, phishing attacks start with psychological tricks to induce or deceive the target to accept the technical tricks such as clicking the link or downloading. Therefore, we recommend that cyber professionals and general users engage in cognitive training to raise cybersecurity awareness.
References (5)
- 1 Method for conducting systematic literature review and meta-analysis for environmental science research [DOI]
- 2 Systematic Review on Social Engineering: Hacking by Manipulating Humans [DOI]
- 3 Identifying Expertise Gaps in Cyber Incident Response: Cyber Defender Needs vs. Technological Development [DOI]
- 4 Cyber-incident Response in Industrial Control Systems: Practices and Challenges in the Petroleum Industry [DOI]
- 5 The Study on Legal and Ethical Issues in Cyber security: in India [DOI]
Cited by 2
Helga Ihm, Alexandra Schedel-Stupperich · Springer eBooks · 2026
Showing 1 of 2 known citations — external sources report more than can currently be individually listed.
Related research
- Formulating Global Policies and Strategies for Combating Criminal Use and Abuse of Artificial Intelligence — shares topic coverage
- A Machine Learning Perspective on the Impact of Cybercrime on Performance in the Nigerian Banking Industry — shares topic coverage
- Internet Crimes- it’s Analysis and Prevention Approaches — shares topic coverage
- Online Banking Adoption and the Surge of Phishing and Online Scams in Nigeria: An Empirical Study — shares topic coverage
- Securing the Future: Cybersecurity Challenges and Solutions in Digital Oilfields — shares topic coverage
Article metrics
Real usage data collected on this platform.
4
Page views
0
PDF downloads
0
Outbound clicks
2
Citations
Views over time
Views by country
Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".
Traffic sources
Referring site, by host.
Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.