September 29, 2015 By Shane Schick 2 min read

Cybercrime may seem like the kind of thing perpetrated by maverick, nontraditional groups, but a group of security researchers recently suggested they might be just as vulnerable to things that hurt their bottom line as their victims.

In a blog post published by the Google Antifraud and Abuse Research team, security experts claimed those trying to combat cybercrime shouldn’t just focus on making their network perimeter tougher to crack. Instead, the industry should work together to effectively make it more expensive to target businesses by raising the price of registering bulk online accounts that later get used in duplicitous acts, for example. The theory goes that, much like any sector of the economy, the black market reacts negatively to increased costs. This could serve as a deterrent to some hacking collectives or organized crime groups, the researchers suggested.

Of course, cybercrime has become an increasingly lucrative business, given what attackers can do with stolen customer information or by gaining access to corporate systems with data they can sell elsewhere. As SC Magazine pointed out, however, it’s rare that security research has examined the true cost of doing business for those conducting phishing schemes or distributing malware. Since criminals need to use public services to impersonate legitimate businesses, this may be an overlooked area of weakness.

Threatpost noted that while ordinary businesses may not be able to make cybercrime more expensive than it is today, there might be better measures to fight back than simply installing a stronger firewall or antivirus program. The Google research emphasized how the company was able to reduce the ability to obtain and verify fake accounts by temporarily blocking free voice-over-IP services and cellular towers. This could be an example of how certain points in cybercriminals’ black-market food chain could be disrupted in a way that benefits legitimate businesses.

Perhaps Dark Reading put it best: Rather than simply following up an attack by beefing up defenses, organizations need to better understand the profitability of cybercrime. That way, there will be less incentive for those stealing data or developing exploit kits to share them on the black market in the first place. The ecosystem of buying and selling among cybercriminals may wind up being a lot more fragile than was ever realized.

More from

Airplane cybersecurity: Past, present, future

4 min read - With most aviation processes now digitized, airlines and the aviation industry as a whole must prioritize cybersecurity. If a cyber criminal launches an attack that affects a system involved in aviation — either an airline’s system or a third-party vendor — the entire process, from safety to passenger comfort, may be impacted.To improve security in the aviation industry, the FAA recently proposed new rules to tighten cybersecurity on airplanes. These rules would “protect the equipment, systems and networks of transport…

Protecting your digital assets from non-human identity attacks

4 min read - Untethered data accessibility and workflow automation are now foundational elements of most digital infrastructures. With the right applications and protocols in place, businesses no longer need to feel restricted by their lack of manpower or technical capabilities — machines are now filling those gaps.The use of non-human identities (NHIs) to power business-critical applications — especially those used in cloud computing environments or when facilitating service-to-service connections — has opened the doors for seamless operational efficiency. Unfortunately, these doors aren’t the…

Communication platforms play a major role in data breach risks

4 min read - Every online activity or task brings at least some level of cybersecurity risk, but some have more risk than others. Kiteworks Sensitive Content Communications Report found that this is especially true when it comes to using communication tools.When it comes to cybersecurity, communicating means more than just talking to another person; it includes any activity where you are transferring data from one point online to another. Companies use a wide range of different types of tools to communicate, including email,…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today