CRIM2010 Chap.5 Four Phases in the History of Cybercrime
Four Phases in the History of Cybercrime
The history of cybercrime is told as networks becoming social, commercial and strategic. Following Alexandrou’s four phases, this chapter moves from experimental hacking on ARPANET, through malware spread by browsers and email, to a business model built on stolen data and crime-as-a-service, and finally to geopolitical operations against institutions and publics.
The central lesson is that phases overlap: new motives and targets pile on top of older offences rather than replacing them.
History also explains today’s law and policy. Each phase prompted new responses, from early computer misuse laws to international cooperation after fast-spreading worms and, more recently, rules on critical infrastructure and ransom reporting.
Knowing which phase a threat belongs to helps you predict who is likely to be targeted, what the offender wants and which agencies will lead the response.
What this chapter covers
- 01
Phase I: breaking what others build
- 02
Phase II: connectivity spreads malware
- 03
Phase III: cybercrime becomes a business
- 04
Phase IV: power and influence
- 05
Motive, target and scale compared
- 06
Why phases overlap
Worked example · free
Four incidents in their phases
- 1Morris worm. Phase I, late 1970s to 1980s: curiosity and status.
- 1Melissa. Phase II, spread through Word and email: disruption.
- 1Zeus. Phase III, theft of financial data: profit.
- 1WannaCry. Phase IV, from 2011: power and influence over institutions.
Key terms
- Crime-as-a-service
- A model in which offenders sell or rent criminal tools and services to others.
- Boot-sector virus
- Malicious code that infects the start-up area of a disk, such as Michelangelo.
- Botnet
- A network of compromised computers controlled together, often for spam or denial of service.
- Cyberwarfare
- Attacks by or for states on another country’s systems or infrastructure, signalled in the lecture by Stuxnet.
- Malware
- Malicious software, such as worms, viruses and Trojans, written to disrupt, damage or gain access.
Four Phases in the History of Cybercrime FAQ
What are the four phases of cybercrime?
Breaking systems from the late 1970s, spreading malware through browsers and email, monetising access and stolen data from the early 2000s, and projecting power since 2011 through espionage, ransomware, infrastructure attacks and disinformation. Each widens the motive, target and scale of offending.
Do the phases replace one another?
No. The lecture stresses that a new phase does not end the previous one: motives and targets pile up while earlier offences continue. Email-borne malware still circulates beside ransomware markets and influence campaigns, so responses must cover every layer.
Why does the love bug matter?
Released in May 2000, it reportedly infected at least 270,000 computers in its first hours and forced shutdowns at Ford, Dow Chemical and the House of Lords. It showed how quickly a single program could cross borders, a point the law chapter develops.
What examples illustrate Phase III?
The lecture names the ILOVEYOU and other mass email worms, the Zeus and SpyEye banking malware, and Stuxnet as a signal of attacks on infrastructure. Its dominant forms include identity theft, payment fraud, phishing, botnets, spyware, ransomware and crime-as-a-service, all driven by profit.
What changed in Phase IV?
From 2011, states, platforms, critical infrastructure and large data systems became intertwined. Typical cases include government-linked intrusions, WannaCry and NotPetya, and Cambridge Analytica, with espionage, ransomware, breaches, infrastructure attacks, disinformation, bots and deepfakes dominating.
Assessment move
Build a four-column table of phase, motive, target and scale, with two signature examples each, and test yourself until you can place any named incident. Note that the slide summary and graphic date Phase II differently, so describe phases by content in written answers. Practise one paragraph that explains overlap with a current example, because that caution earns marks in essay-style questions.
Add a line linking each phase to a later chapter so the history becomes a map of the course rather than a list of dates.
Working through Four Phases in the History of Cybercrime in CRIM2010? Sia is AskSia’s AI Sociology tutor — ask any CRIM2010 Four Phases in the History of Cybercrime question and get a clear, step-by-step explanation grounded in how CRIM2010 is taught and assessed. Read this chapter free, then take your hardest questions to Sia.
