Revenge porn: Sharing explicit images or videos of an individual without their consent with the intent to control or embarrass the individual.

Threatening: Threatening to share intimate photos if their certain demands are not met.

Creating Deepfakes: refers to using deepfake technology to alter pre-existing photographs or videos, these fakes show someone in a compromising or intimate setting without the individuals consent.

Case study: https://www.esafety.gov.au/key-topics/image-based-abuse/stories/kate

Zainab, a 24-year-old law student, was in a relationship with fellow student Sam for nearly three years. They consensually photographed their sexual encounters, but Sam became jealous and threatened to distribute the photos to her family and friends. Fearing the implications for her career and her Muslim family, Zainab stayed in the relationship for six months before breaking up. Later, a student found sexual images of Zainab on a Tumblr page, accompanied by horrific comments encouraging others to film sexual and physical assaults. Zainab sought help from Women's Legal Service NSW.

Radicalisation happens when a person starts to believe that their views are very different from the people around them in their community or society. A small number of people from various national, political, and religious groups can become radicalised. This can lead to violence or terror if they think using fear is necessary to create change in society, politics, or their beliefs. It can be hard to figure out exactly what causes someone to choose violence as a way to change things, as many factors can play a part. The process of radicalisation is different for each person and usually doesn't lead to serious harm. However, in some rare cases, the choices made by someone going through radicalisation can lead to dangerous or violent actions.

Case Study: https://www.gov.uk/government/publications/the-prevent-duty-safeguarding-learners-vulnerable-to-radicalisation/case-studies

Alice, a year 11 student at an independent secondary school, wrote an English coursework expressing extreme right-wing views and glorifying the Columbine shooters. She felt the school ignored her bullying and decided to take matters into her own hands. The school reassured her and offered support. The school put in an action plan to support Alice, which was shared with her college. The college assured her mother and the college that it had a zero-tolerance policy towards bullying.

Silk Road was an infamous black market which operated primarily on the dark web launched in 2011. Silk Road is widely known for assisting the sales of illegal goods and drugs. The marketplace used Bitcoin and other cryptocurrencies to make transactions difficult to trace. The site was named after the ancient Silk Road trading routes, symbolising a platform for illicit exchanges across borders. Users could buy and sell illegal items like drugs, fake IDs, stolen credit card information, and even weapons.

In 2013, the FBI shut down Silk Road and arrested its founder, Ross Ulbricht, who was convicted on several charges, including conspiracy to commit money laundering, computer hacking, and drug trafficking.

https://www.bbc.com/news/technology-24443216

Case Study: Four men were arrested in the UK for their involvement in the illegal online marketplace, Silk Road. Three of the men, aged in their 20s, were arrested in Manchester, and a fourth man in his 50s was detained in Devon. They were initially arrested on suspicion of drug-related crimes.

Silk Road, which sold illegal drugs and other items, was shut down by authorities. The site operated on the dark web using Tor, which makes it difficult to track users. The site used Bitcoin for payments. The UK's National Crime Agency (NCA) warned that criminals cannot remain anonymous online and will be caught.

The NCA worked with US law enforcement to track UK users of the Silk Road, aiming to understand how criminals use the dark web. The NCA also highlighted that such sites are used for crimes like fraud, human trafficking, and the trade of illegal goods. Although Silk Road is gone, there are reports that a new version might be launched.

Hacking in cyber security involves the misuse of devices like computers, smartphones, tablets, and networks to cause damage, corrupt systems, gather user information, steal data, and disrupt data-related activities. Hackers are seen as increasingly sophisticated, using stealthy attack methods and creating attack vectors to trick users into opening malicious attachments or links, stealing sensitive personal data. There are different types of hackers:

Black hat hackers
Black hat hackers look for weaknesses in computer systems to exploit for personal gain or harmful purposes. They may steal money, personal information, or carry out attacks for things like revenge, reputation, or political reasons. Their actions can cause serious damage to both individuals and organisations by stealing sensitive data or disrupting computer systems and websites.

White hat hackers
White hat hackers try to stop black hat hackers by using their skills to protect systems. They break into networks with permission from organisations to test and improve security. This is known as ethical hacking, and it helps find weaknesses before black hat hackers can exploit them.

Grey hat hackers
Grey hat hackers may break rules or hack into systems but without any harmful intent or for financial gain. They often do this to raise awareness about a security problem, but unlike white hat hackers, they may do it publicly, which can also alert bad hackers to the issue.

Case Study: https://www.indusface.com/blog/notorious-hacks-history/

In 2018, Quora suffered a major data breach where the personal data of 100 million users (about 50% of its users) was exposed. Hackers gained unauthorised access to Quora's systems, which was discovered on November 30, 2018, and announced publicly on December 3, 2018. The stolen data included usernames, email addresses, encrypted passwords, and information from linked accounts like Facebook and Twitter. Quora took immediate action by resetting affected users' passwords, logging them out, and notifying law enforcement. This breach emphasises the need for strong passwords and better security measures to protect users' data.

A phisher collects personal information about a victim from public sources, like social media, to create fake messages that seem trustworthy. They use details such as the victim’s name, job, email, and interests to make their messages appear real. These fake emails often come from known contacts or organizations and contain malicious attachments or links to fake websites. These websites may look like a trusted site, such as a bank or workplace, to steal personal details like usernames, passwords, or payment information. While some phishing emails can be spotted due to poor design, many are becoming more convincing as cybercriminals use professional methods to improve their attacks. few ways in which these phishing attacks happen are:

Email Phishing
Phishing attacks are mostly done via email. Attackers create fake websites or email addresses similar to real organisations, tricking people into clicking malicious links or downloading infected files. These emails often create a sense of urgency to make victims act quickly without thinking.

Spear Phishing
Spear phishing targets specific individuals. The attacker already knows details like the victim's name, job title, and workplace. This personalised information makes the email more convincing and manipulates the victim into doing things like transferring money or sharing sensitive information.

Whaling
Whaling is a type of phishing aimed at high-level employees, like executives. These attacks are subtle and use personal information gathered about the victim. The goal is to steal sensitive data, often using tactics like fake tax returns or highly personalised messages.

Smishing and Vishing
These attacks use phones instead of emails. Smishing involves fraudulent text messages, while vishing involves phone calls. Attackers pretend to be from trusted organisations, like a bank, and ask victims to provide personal details or payment information.

Angler Phishing
Angler phishing occurs on social media. Attackers create fake accounts that look like official company profiles. When users complain or seek help, they end up contacting the fake account. The attacker may ask for personal information or lead the victim to a fake support page with malicious content.

Case Study: https://www.phishprotection.com/phishing/phishing-case-studies-learning-from-the-mistakes-of-others
In 2014, Upsher-Smith Laboratories, a pharmaceutical company based in Maple Grove, experienced a major financial loss due to a type of cyberattack called CEO fraud. CEO fraud is a form of phishing where attackers impersonate a company’s CEO and send fraudulent emails to employees, usually in the finance or accounts department, instructing them to carry out wire transfers or financial transactions.

In this case, the attackers pretended to be the CEO of Upsher-Smith Laboratories and emailed the Accounts Payable Coordinator with instructions to transfer money. They also included a message that seemed to come from the company's lawyer, adding legitimacy to the request. The attackers asked the employee to make nine wire transfers, amounting to more than $50 million, to accounts they controlled.

Despite the company's efforts to stop one of the transfers, the fraudulent actions resulted in a loss of over $39 million. This incident highlights the dangers of CEO fraud and the need for companies to be vigilant about email security and employee training to avoid falling victim to such attacks.