The DOI matches its Crossref record; 11 of the 11 references it cites were found in a registry or an index.
Social engineering as an attack vector for ransomware
Abstract
Constant ransomware attacks achieve to evade multiple security perimeters, because its strategy is based on the exploitation of users-the weakest link in the security chain-getting high levels of effectiveness. In this paper, an in-depth analysis of the anatomy of the ransomware is develop, and how they combine technology with manipulation, through social engineering, to meet their goals and compromise thousands of computers. Finally, simulations of the phases that it follows are carried out, leaving the necessary guidelines to evaluate the security of the information, and thus, generate policies that minimize the risks of loss of information.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“A Ransomware attack involves six stages: (1) creating the malware; (2) deployment; (3) installation; (4) command and control; (5) destruction; and (6) extortion [13].”
From Social Engineering Attacks: A Survey (2019) · cites this paper as [13]
In the citing paper
“In order to recover these files, the victim is threatened to publish them unless paying a ransom [13].”
From Social Engineering Attacks: A Survey (2019) · cites this paper as [13]
Citations
Cites
Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks
Kharraz, A., Robertson, W., Balzarotti, D., Bilge, L., & Kirda, E. (2015) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-20550-2_1 · Cited by 458
Social engineering : the art of human hacking
Hadnagy, C. (2011) · Cited by 322
Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
Mylonas, A., & Gritzalis, D. A. (2012) · Computers & Security · doi:10.1016/j.cose.2012.05.004 · Cited by 262
Behind closed doors: measurement and analysis of CryptoLocker ransoms in Bitcoin
Liao, K., Zhao, Z., Doupé, A., & Ahn, G. (2016) · APWG Symposium on Electronic Crime Research (eCrime) · doi:10.1109/ecrime.2016.7487938 · Cited by 188
Social engineering attack framework
Mouton, F., Malan, M. M., Leenen, L., & Venter, H. S. (2014) · Information Security for South Africa · doi:10.1109/issa.2014.6950510 · Cited by 100
Oktavianto, D., & Muhardianto, I. (2013) · CERN Document Server (European Organization for Nuclear Research) · Cited by 80
A literature review on phishing crime, prevention review and investigation of gaps
Shaikh, A. N., Shabut, A. M., & Hossain, M. A. (2016) · International Conference on Software, Knowledge, Information Management and Applications (SKIMA) · doi:10.1109/skima.2016.7916190 · Cited by 62
UNVEIL: A large-scale, automated approach to detecting ransomware (keynote)
Kirda, E. (2017) · IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER) · doi:10.1109/saner.2017.7884603 · Cited by 59
Knowing the ransomware and building defense against it - specific to healthcare institutes
Gagneja, K. K. (2017) · International Conference on Mobile and Secure Services (MobiSecServ) · doi:10.1109/mobisecserv.2017.7886569 · Cited by 35
Ransomware: Studying transfer and mitigation
Shinde, R., der Veeken, P. V., Schooten, S. V., & van den Berg, J. (2016) · International Conference on Computing, Analytics and Security Trends · doi:10.1109/cast.2016.7914946 · Cited by 35
Analysis and forensics for behavior characteristics of malware in Internet
Liu, W., Ren, P., Liu, K., Li, X., Wu, J., & Liu, K. (2016) · IEEE International Conference on Digital Signal Processing (DSP) · doi:10.1109/icdsp.2016.7868617 · Cited by 4
Research works printed but not linked: 1
- liska, 2016, Ransomware Defending Against Digital Extortion
Cited by
Social Engineering Attacks: A Survey
Salahdine, F., & Kaabouch, N. (2019) · Future Internet · doi:10.3390/fi11040089 · Cited by 509
“This involves three main steps: causing a problem such as crashing the network; advertising that the attacker is the only person to fix that problem; solving the problem while getting the desired information and leaving without being detected [18].”
BackgroundLeveraging human factors in cybersecurity: an integrated methodological approach
Pollini, A., Callari, T. C., Tedeschi, A., Ruscio, D., Save, L., Chiarugi, F., & Guerri, D. (2021) · Cognition Technology & Work · doi:10.1007/s10111-021-00683-y · Cited by 303
Ransomware on cyber-physical systems: Taxonomies, case studies, security gaps, and open challenges
Benmalek, M. (2024) · Internet of Things and Cyber-Physical Systems · doi:10.1016/j.iotcps.2023.12.001 · Cited by 107
Contemplating social engineering studies and attack scenarios: A review study
Yasin, A., Fatima, R., Liu, L., Yasin, A., & Wang, J. (2019) · Security and Privacy · doi:10.1002/spy2.73 · Cited by 55
Internet-Based Social Engineering Psychology, Attacks, and Defenses: A Survey
Longtchi, T. T., Rodriguez, R. M., Al-Shawaf, L., Atyabi, A., & Xu, S. (2024) · Proceedings of the IEEE · doi:10.1109/jproc.2024.3379855 · Cited by 52
Metadata
- Authors
- Gallegos-Segovia, P. L., Bravo-Torres, J. F., Larios-Rosillo, V. M., Vintimilla-Tapia, P. E., Yuquilima-Albarado, I. F., & Jara-Saltos, J. D.
- Affiliations
- Politecnica Salesiana University (EC)
- Venue
- 2017 CHILEAN Conference on Electrical, Electronics Engineering, Information and Communication Technologies (CHILECON)
- Publisher
- IEEE
- Published
- 2017-10
- Pages
- 1-6
- OpenAlex
- W2781518247
- Cited by
- 51
- References
- 11
- Citations by year
- 2025: 4 · 2024: 8 · 2023: 9 · 2022: 7 · 2021: 7 · 2020: 6 · 2019: 5 · 2018: 5
- FWCI
- 3.11
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- IEEE CHILEAN Conference on Electrical, Electronics Engineering, Information and Communication Technologies (CHILECON) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Software › Advanced Malware Detection Techniques
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Information Systems › Spam and Phishing Detection
- Keywords
- ransomware, social engineering, human factors in cybersecurity, user manipulation, attack vectors, information security, security policy
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
