战略与国际研究中心-Economic-Impact-of-Cybercrime_28页_547kb

Economic Impact of Cybercrime—No Slowing Down Summary

Core Content

This report provides an in-depth analysis of the economic impact of cybercrime globally, highlighting its persistent growth and the challenges in estimating its true cost. It outlines the various forms of cybercrime, their financial implications, and the factors contributing to their expansion.

Main Points

Cybercrime Overview

• Cybercrime is a growing and highly profitable illegal activity that is difficult to detect and prosecute.
• Cybercriminals are technologically advanced, using cloud computing, AI, and encryption to enhance their capabilities.
• Cybercrime is not the most expensive crime globally, but it affects the largest number of people and has a significant impact on individuals and businesses.
• Cybercrime is often underreported due to lack of data collection and reluctance of victims to disclose losses.

The Global Cost

• The estimated global cost of cybercrime in 2016 was between $445 billion and $608 billion, or 0.59% to 0.80% of global GDP.
• The cost varies by region and is influenced by cybersecurity maturity and economic development.
• Wealthier countries tend to suffer higher losses, while developing countries face more frequent but less valuable attacks.

Regional Distribution of Cybercrime

• North America: Cybercrime cost ranges from $140 billion to $175 billion, or 0.69% to 0.87% of GDP.
• Europe and Central Asia: Cybercrime cost ranges from $160 billion to $180 billion, or 0.79% to 0.89% of GDP.
• East Asia & the Pacific: Cybercrime cost ranges from $120 billion to $200 billion, or 0.53% to 0.89% of GDP.
• South Asia: Cybercrime cost ranges from $7 billion to $15 billion, or 0.24% to 0.52% of GDP.
• Latin America and the Caribbean: Cybercrime cost ranges from $15 billion to $30 billion, or 0.28% to 0.57% of GDP.
• Sub-Saharan Africa: Cybercrime cost ranges from $1 billion to $3 billion, or 0.07% to 0.20% of GDP.
• MENA: Cybercrime cost ranges from $2 billion to $5 billion, or 0.06% to 0.16% of GDP.

Estimation Issues

• Underreporting is a major issue in estimating cybercrime costs, with only 13% of cybercrime incidents reported in the UK.
• The cost of risk-avoidance (e.g., moving to paper-based systems) is difficult to quantify.
• National estimates are imprecise due to limited data and varying methodologies.
• Cybercrime costs are often skewed, as losses are unevenly distributed among companies and individuals.

Key Information

Cybercrime Trends

• State-sponsored cybercrime is a significant driver, especially through financial institutions and data theft.
• Ransomware is the fastest-growing form of cybercrime, with attacks becoming more sophisticated and accessible.
• Cybercrime-as-a-Service (CaaS) has lowered the barrier to entry for cybercriminals, enabling even non-technical individuals to launch attacks.
• Digital currencies like Bitcoin are both targets and tools for cybercriminals, offering anonymity and ease of transactions.

Cybercrime Techniques

• Malicious scans: 80 billion per day.
• New malware: 300,000 to 1 million per day.
• Phishing: 33,000 attacks per day.
• Ransomware: 4,000 attacks per day.
• Records lost to hacking: 780,000 per day.

Cybercrime Impact

• Financial cybercrime is particularly damaging, with banks being a primary target.
• Intellectual property theft and identity theft are significant contributors to cybercrime losses.
• Business Email Compromise (BEC) is a major threat, often used to defraud companies.
• Hidden costs include loss of productivity, trust, and reputational damage.

Cybercrime and the Dark Web

• The Dark Web and anonymizing services (e.g., Tor) provide cybercriminals with a safe environment to operate and monetize stolen data.
• Digital currencies facilitate untraceable transactions, making it easier for criminals to profit from cyberattacks.

Cybercrime and IoT

• The Internet of Things (IoT) is becoming a new target due to weak security measures.
• IoT devices can be exploited for denial-of-service (DoS) attacks, causing widespread disruption.

Selected Country Profiles

• Australia, Brazil, Canada, Germany, Japan, Mexico, United Kingdom, and United Arab Emirates are all affected by cybercrime, with varying levels of cybersecurity maturity.

What Can Be Done?

• Improve cybersecurity maturity and data collection.
• Increase international cooperation to combat cybercrime.
• Enhance cybercrime awareness among individuals and businesses.
• Strengthen legal frameworks and penalties for cybercriminals.
• Invest in cyberinsurance and network security to mitigate risks and recover from attacks.

Conclusion

Cybercrime is a global issue that continues to grow due to technological advancements, weak defenses, and the availability of tools and services that make it easier to commit and monetize. The economic impact is substantial, with cybercrime costs surpassing $600 billion globally, and its effects are felt across all sectors of the economy. Addressing cybercrime requires a multi-faceted approach involving better data collection, stronger legal and technical defenses, and international collaboration.