The DOI matches its Crossref record; 11 of the 11 references it cites were found in a registry or an index.
Social engineering as an attack vector for ransomware
Abstract
Constant ransomware attacks achieve to evade multiple security perimeters, because its strategy is based on the exploitation of users-the weakest link in the security chain-getting high levels of effectiveness. In this paper, an in-depth analysis of the anatomy of the ransomware is develop, and how they combine technology with manipulation, through social engineering, to meet their goals and compromise thousands of computers. Finally, simulations of the phases that it follows are carried out, leaving the necessary guidelines to evaluate the security of the information, and thus, generate policies that minimize the risks of loss of information.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“A Ransomware attack involves six stages: (1) creating the malware; (2) deployment; (3) installation; (4) command and control; (5) destruction; and (6) extortion [13].”
From Social Engineering Attacks: A Survey (2019) · cites this paper as [13]
In the citing paper
“In order to recover these files, the victim is threatened to publish them unless paying a ransom [13].”
From Social Engineering Attacks: A Survey (2019) · cites this paper as [13]
Citations
Cites
Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks
Kharraz, A., Robertson, W., Balzarotti, D., Bilge, L., & Kirda, E. (2015) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-20550-2_1 · Cited by 458
Social engineering : the art of human hacking
Hadnagy, C. (2011) · Cited by 322
Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
Mylonas, A., & Gritzalis, D. A. (2012) · Computers & Security · doi:10.1016/j.cose.2012.05.004 · Cited by 262
Behind closed doors: measurement and analysis of CryptoLocker ransoms in Bitcoin
Liao, K., Zhao, Z., Doupé, A., & Ahn, G. (2016) · APWG Symposium on Electronic Crime Research (eCrime) · doi:10.1109/ecrime.2016.7487938 · Cited by 188
Social engineering attack framework
Mouton, F., Malan, M. M., Leenen, L., & Venter, H. S. (2014) · Information Security for South Africa · doi:10.1109/issa.2014.6950510 · Cited by 100
Oktavianto, D., & Muhardianto, I. (2013) · CERN Document Server (European Organization for Nuclear Research) · Cited by 80
A literature review on phishing crime, prevention review and investigation of gaps
Shaikh, A. N., Shabut, A. M., & Hossain, M. A. (2016) · International Conference on Software, Knowledge, Information Management and Applications (SKIMA) · doi:10.1109/skima.2016.7916190 · Cited by 62
UNVEIL: A large-scale, automated approach to detecting ransomware (keynote)
Kirda, E. (2017) · IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER) · doi:10.1109/saner.2017.7884603 · Cited by 59
Knowing the ransomware and building defense against it - specific to healthcare institutes
Gagneja, K. K. (2017) · International Conference on Mobile and Secure Services (MobiSecServ) · doi:10.1109/mobisecserv.2017.7886569 · Cited by 35
Ransomware: Studying transfer and mitigation
Shinde, R., der Veeken, P. V., Schooten, S. V., & van den Berg, J. (2016) · International Conference on Computing, Analytics and Security Trends · doi:10.1109/cast.2016.7914946 · Cited by 35
Research works printed but not linked: 1
- liska, 2016, Ransomware Defending Against Digital Extortion
Cited by
Social Engineering Attacks: A Survey
Salahdine, F., & Kaabouch, N. (2019) · Future Internet · doi:10.3390/fi11040089 · Cited by 509
“This involves three main steps: causing a problem such as crashing the network; advertising that the attacker is the only person to fix that problem; solving the problem while getting the desired information and leaving without being detected [18].”
BackgroundLeveraging human factors in cybersecurity: an integrated methodological approach
Pollini, A., Callari, T. C., Tedeschi, A., Ruscio, D., Save, L., Chiarugi, F., & Guerri, D. (2021) · Cognition Technology & Work · doi:10.1007/s10111-021-00683-y · Cited by 303
Ransomware on cyber-physical systems: Taxonomies, case studies, security gaps, and open challenges
Benmalek, M. (2024) · Internet of Things and Cyber-Physical Systems · doi:10.1016/j.iotcps.2023.12.001 · Cited by 107
Contemplating social engineering studies and attack scenarios: A review study
Yasin, A., Fatima, R., Liu, L., Yasin, A., & Wang, J. (2019) · Security and Privacy · doi:10.1002/spy2.73 · Cited by 55
Internet-Based Social Engineering Psychology, Attacks, and Defenses: A Survey
Longtchi, T. T., Rodriguez, R. M., Al-Shawaf, L., Atyabi, A., & Xu, S. (2024) · Proceedings of the IEEE · doi:10.1109/jproc.2024.3379855 · Cited by 52
Yathiraju, N., Jakka, G., Parisa, S. K., & Oni, O. (2022) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-7998-8693-8.ch007 · Cited by 45
Zaoui, M., Belfaik, Y., Sadqi, Y., Maleh, Y., & Ouazzane, K. (2024) · IEEE Access · doi:10.1109/access.2024.3403197 · Cited by 44
Automated Analysis Approach for the Detection of High Survivable Ransomware
Ahmed, Y. A., Koçer, B., & Al‐rimy, B. A. S. (2020) · KSII Transactions on Internet and Information Systems · doi:10.3837/tiis.2020.05.021 · Cited by 39
Social Engineering Attacks A Reconnaissance Synthesis Analysis
Arabia-Obedoza, M. R., Rodriguez, G., Johnston, A., Salahdine, F., & Kaabouch, N. (2020) · IEEE Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON) · doi:10.1109/uemcon51285.2020.9298100 · Cited by 31
Mitigating the Ransomware Threat: A Protection Motivation Theory Approach
Ophoff, J., & Lakay, M. T. (2019) · Communications in computer and information science · doi:10.1007/978-3-030-11407-7_12 · Cited by 27
Trends and Future Directions in Automated Ransomware Detection
Jegede, A., Fadele, A., Onoja, M., Aimufua, G., & Mazadu, I. J. (2022) · Journal of Computing and Social Informatics · doi:10.33736/jcsi.4932.2022 · Cited by 27
Papatsaroucha, D., Nikoloudakis, Y., Kefaloukos, I., Pallis, E., & Markakis, E. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.09986 · Cited by 26
Ransomware Targeting Automobiles
Bajpai, P., Enbody, R. J., & Cheng, B. H. C. (2020) · doi:10.1145/3375706.3380558 · Cited by 25
Technical and Behavioural Training and Awareness Solutions for Mitigating Ransomware Attacks
Bello, A., & Maurushat, A. (2020) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-51974-2_14 · Cited by 21
Cyberspace and Personal Cyber Insurance: A Systematic Review
McGregor, R., Reaiche, C. H., Boyle, S., & de Zubielqui, G. C. (2023) · Journal of Computer Information Systems · doi:10.1080/08874417.2023.2185551 · Cited by 21
A novel approach to ransomware: Designing a safe zone system
Baykara, M., & Sekin, B. (2018) · International Symposium on Digital Forensics and Security (ISDFS) · doi:10.1109/isdfs.2018.8355317 · Cited by 19
Redefining the Approach to Cybersecurity
Corradini, I. (2020) · Studies in systems, decision and control · doi:10.1007/978-3-030-43999-6_3 · Cited by 17
Abroshan, H., Devos, J., Poels, G., & Laermans, E. (2021) · ACM Conference on User Modeling, Adaptation and Personalization (UMAP) · doi:10.1145/3450614.3464472 · Cited by 16
Deepfakes in Social Engineering Attacks
Dsouza, D. S., Hajjar, A. E., & Jahankhani, H. (2024) · Space Law and Policy · doi:10.1007/978-3-031-64045-2_8 · Cited by 12
Kolli, Y., Mohd, T. K., & Javaid, A. Y. (2018) · IEEE Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON) · doi:10.1109/iemcon.2018.8614801 · Cited by 11
Cyber Threat Ransomware and Marketing to Networked Consumers
Butt, U., Abbod, M., & Kumar, A. (2019) · Advances in marketing, customer relationship management, and e-services book series · doi:10.4018/978-1-7998-0131-3.ch008 · Cited by 11
Security Awareness Strategy for Phishing Email Scams: A Case Study One of a Company in Singapore
Febriyani, W., Fathia, D., Widjajarto, A., & Lubis, M. (2023) · JOIV International Journal on Informatics Visualization · doi:10.30630/joiv.7.3.2081 · Cited by 9
Lawall, A., & Beenken, P. (2024) · European Interdisciplinary Cybersecurity Conference (EICC) · doi:10.1145/3655693.3661321 · Cited by 9
Volenti non fit injuria: Ransomware and its Victims
Atapour–Abarghouei, A., Bonner, S., & McGough, A. S. (2019) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata47090.2019.9006298 · Cited by 9
Lemmou, Y., & Souidi, E. M. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-00434-7_8 · Cited by 8
Understanding Responses to Phishing in Saudi Arabia via the Theory of Planned Behaviour
Alyahya, A. A., & Weir, G. R. S. (2021) · National Computing Colleges Conference (NCCC) · doi:10.1109/nccc49330.2021.9428823 · Cited by 8
Trends and challenges in research into the human aspects of ransomware: a systematic mapping study
Murray, G., Falkeling, M., & Gao, S. H. (2024) · Information and Computer Security · doi:10.1108/ics-12-2022-0195 · Cited by 7
Automated Social Engineering Attacks using ChatBots on Professional Social Networks
Ariza, M., de Azambuja, A. J. G., Nobre, J. C., & Granville, L. Z. (2023) · doi:10.5753/wgrs.2023.747 · Cited by 7
Mitigating Social Engineering Attacks Through Cost-Effective Security Awareness Training Policy
Qin, Y., Yang, X., Yang, L., & Huang, K. (2025) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2025.3556927 · Cited by 6
Social Engineering in Social Network: A Systematic Literature Review
Abubaker, A. A., Eleyan, D., Eleyan, A., Bejaoui, T., Katuk, N., & Al-Khalidi, M. (2023) · International Symposium on Networks, Computers and Communications (ISNCC) · doi:10.1109/isncc58260.2023.10323826 · Cited by 6
SDNHive: A Proof-of-Concept SDN and Honeypot System for Defending Against Internal Threats
Karakate, M., Esaki, H., & Ochiai, H. (2021) · International Conference on Communication and Network Security (ICCNS) · doi:10.1145/3507509.3507511 · Cited by 6
Analysis of AES-CBC Encryption for Interpreting Crypto-Wall Ransomware
Pillai, A., Kadikar, R., Vasanthi, M. S., & Amutha, B. (2018) · International Conference on Communications and Signal Processing (ICCSP) · doi:10.1109/iccsp.2018.8524494 · Cited by 6
Vendor communication themes in darknet Ransomware-as-a-Service (RaaS) advertisements
Fisher, T., Pieri, Z. P., Howell, C. J., O’Malley, R., Tremblay, L. B., & Dawoud, M. (2025) · Computers in Human Behavior · doi:10.1016/j.chb.2025.108571 · Cited by 5
Muhanad, A., Supti, T. I., Abuelezz, I., Yankouskaya, A., Khan, K. M., Barhamgi, M., Nhlabatsi, A., & Ali, R. (2025) · Information and Computer Security · doi:10.1108/ics-11-2024-0280 · Cited by 5
Pillai, A., Vasanthi, M. S., Kadikar, R., & Amutha, B. (2018) · International Journal of Engineering & Technology · doi:10.14419/ijet.v7i2.24.11997 · Cited by 5
Log analysis for malicious software detection
Moussaileb, R. (2020) · theses.fr (ABES) · doi:10.70675/9eff578fz05aaz43b9za3cdz77f44bb0929f · Cited by 5
A Human-Centric Cybersecurity Framework for Ensuring Cybersecurity Readiness in Universities
Gavaza, B., Kandiero, A., & Katsande, C. (2023) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-6684-9018-1.ch012 · Cited by 3
Ataques Automatizados de Engenharia Social com o uso de Bots em Redes Sociais Profissionais
Ariza, M., de Azambuja, A. J. G., Nobre, J. C., & Granville, L. Z. (2022) · Simpósio Brasileiro de Cibersegurança (SBSeg) · doi:10.5753/sbseg.2022.225334 · Cited by 3
Synthesis of Evidence on Existing and Emerging Social Engineering Ransomware Attack Vectors
Bello, A., & Maurushat, A. (2022) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-6684-5827-3.ch015 · Cited by 3
Human Factors and Cybersecurity
Hadlington, L., & Ryding, C. (2025) · Routledge eBooks · doi:10.4324/9781003509011 · Cited by 2
A Quantitative Field Study of a Persuasive Security Technology in the Wild
Vargheese, J. P., Collinson, M., & Masthoff, J. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-19097-1_13 · Cited by 2
Defense in Depth Strategy from Phising Attacks in Using Instagram
Nasution, M. R., Lubis, M., Saedudin, R. R., & Widjajarto, A. (2024) · International Conference on Data Science and Its Applications (ICoDSA) · doi:10.1109/icodsa62899.2024.10651679 · Cited by 2
Analysis of Embedded Fingerprint Biometric Recognition System Algorithm
Elzein, I. M., & Kurdi, M. M. (2021) · International Symposium on Advanced Topics in Electrical Engineering · doi:10.1109/atee52255.2021.9425124 · Cited by 2
Ransomware Behavior on Windows Endpoint: An Analysis
MyCERT, C. M., Zakaria, W. Z. A., Abdollah, M. F., Fakulti Teknologi Maklumat dan Komunikasi, U. T. M. M., Abdollah, O., Fakulti Teknologi Maklumat dan Komunikasi, U. T. M. M., Yassin, S. M. W. M. S. M. M., & Fakulti Teknologi Maklumat dan Komunikasi, U. T. M. M. (2023) · Journal of Social Science and Humanities · doi:10.26666/rmp.jssh.2023.5.4 · Cited by 2
Exploring Healthcare Cybersecurity Systems in the Age of COVID-19
Richardson, K., Burrell, D. N., Mingo, H. C., Ferreras-Perez, J., Shen, P., Muller, S. R., Bessette, D. I., & Khanta, K. (2023) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-6684-7207-1.ch014 · Cited by 1
El concepto de delito informático según la nueva legislación Chilena (Ley nº 21.459)
Dolmestch, R. N. (2023) · Política criminal · doi:10.4067/s0718-33992023000200666 · Cited by 1
Bello, A., & Aigbefo, Q. A. (2022) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-6684-5284-4.ch013 · Cited by 1
Cyber Crime Detection and Prevention Techniques on Cyber Cased Objects Using SVM and Smote
Kishore, R. S., & Bhaskari, D. L. (2023) · International Journal on Recent and Innovation Trends in Computing and Communication · doi:10.17762/ijritcc.v11i8.7951 · Cited by 1
Keshari, S., Kumar, S., Sharma, P. K., & Tanwar, S. (2024) · CRC Press eBooks · doi:10.1201/9781003471059-33 · Cited by 1
RANSOMWARE: A SURVEY ON VARIOUS ATTACKS AND DEFENSE MECHANISMS
Gomathi, S., & Kumari, K. A. (2021) · International Conference on Combinatorial and Optimization (ICCAP) · doi:10.4108/eai.7-12-2021.2314607
Decrypting the Shadows Forensics and Investigation of Ransomware Attacks
Dave, S., Dodiya, K. R., & Kumar, K. (2025) · Advances in computational intelligence and robotics book series · doi:10.4018/979-8-3373-5545-0.ch008
A Review on Voice-based Scam Detection Using Machine Learning and Speech Analytics
Singh, M. R. P. (2026) · Journal of Science Engineering Technology and Management Sciences · doi:10.64771/jsetms.2026.v03.i05.pp271-279
Overview of methods to protect against social engineering attacks
Kontogeorgopoulos, K. (2023) · Institutional Repository Hellanicus
Parra, J. C. M. (2026) · Portuguese National Funding Agency for Science, Research and Technology (RCAAP Project by FCT)
UNDERSTANDING THE GROWING ISSUE OF SOCIAL ENGINEERING: A LEGAL TAKE ON HUMAN-BASED ENCROACHMENT
Abaranji, A. (2022) · National Journal of Cyber Security Law
Metadata
- Authors
- Gallegos-Segovia, P. L., Bravo-Torres, J. F., Larios-Rosillo, V. M., Vintimilla-Tapia, P. E., Yuquilima-Albarado, I. F., & Jara-Saltos, J. D.
- Affiliations
- Politecnica Salesiana University (EC)
- Venue
- 2017 CHILEAN Conference on Electrical, Electronics Engineering, Information and Communication Technologies (CHILECON)
- Publisher
- IEEE
- Published
- 2017-10
- Pages
- 1-6
- OpenAlex
- W2781518247
- Cited by
- 51
- References
- 11
- Citations by year
- 2025: 4 · 2024: 8 · 2023: 9 · 2022: 7 · 2021: 7 · 2020: 6 · 2019: 5 · 2018: 5
- FWCI
- 3.11
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- IEEE CHILEAN Conference on Electrical, Electronics Engineering, Information and Communication Technologies (CHILECON) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Software › Advanced Malware Detection Techniques
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Information Systems › Spam and Phishing Detection
- Keywords
- ransomware, social engineering, human factors in cybersecurity, user manipulation, attack vectors, information security, security policy
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
