EconoMical, PsycHologicAl and Societal Impact of RanSomware (EMPHASIS)

该项目考虑了勒索软件的经济、心理和社会影响。勒索软件是一种特殊类型的恶意软件，是一种新的在线勒索犯罪。恶意软件是通过网络钓鱼邮件或网站上的免费下载安装的。当它运行时，它会执行一个操作，比如对用户的文件进行加密，并要求赎金来撤销这个操作。受害者通过心理操纵被强迫付钱，有时伪装成建议。由于犯罪的技术方面以微妙的方式与各种人的方面相结合并加以利用，它对受害者产生了深刻的经济、心理和社会影响，这使得根除犯罪变得更加复杂。执法机构估计，犯罪分子使用勒索软件造成的损失高达数百万英镑，但真正的损失可能永远无法得知，因为受害者表现出特别不愿意报案。这个项目旨在回答以下问题：为什么勒索软件作为一种犯罪如此有效？为什么这么多人成为它的受害者？谁在实施勒索软件攻击？如何协助警察机构？需要采取哪些干预措施来减轻勒索软件的影响？为此，该项目通过对公众和中小企业的调查以及对利益相关者的访谈，从执法机构（已同意与该项目密切合作）收集数据。这些数据将使用脚本分析、行为分析和其他分析技术进行分析，从而得出有关罪犯、受害者和典型勒索软件场景的叙述。然后将构建勒索软件的经济和行为模型，并用于改进勒索软件的缓解和咨询，以及对执法的支持。

The project considers the economical, psychological and social effects of ransomware.Ransomware is a particular type of malware, and a new crime of extortion committed online. Malicious software gets installed through a phishing email or a drive-by download on a website. When it runs, it performs an action such as the encryption of the user's files, and asks a ransom for this action to be undone. The victim is coerced into paying through psychological manipulations which sometimes masquerade as advice. Due to the subtle ways that the technological aspects of the crime blend with - and are exploited through - various human dimensions, it has profound economic, psychological and societal impacts upon its victims, which makes its eradication all the more complicated. Law Enforcement Agencies have estimated that losses to criminals using ransomware are many millions of pounds, but the true costs may never be known because victims have shown to be particularly reluctant to report. This project sets out to answer the following questions:Why is ransomware so effective as a crime and why are so many people falling victim to it?Who is carrying out ransomware attacks?How can police agencies be assisted?What interventions are required to mitigate the impacts of ransomware? In order to do so, the project gathers data from Law Enforcement Agencies (which have agreed to closely collaborate with the project), through surveys of the general public and SMEs, and through interviews with stakeholders. The data will be analysed using script analysis, behavioural analysis, and other profiling techniques, leading to narratives regarding the criminals, the victims, and the typical ransomware scenario. Economical and behavioural models of ransomware will then be constructed and used to improve ransomware mitigation and advice, as well as support for law enforcement.