Global Cybersecurity & Hacking

Cybersecurity: $10.5T Crime Economy

Cybercrime represents a truly colossal threat, generating an estimated $10.5 trillion in annual losses globally in 2024 – making it the third-largest economy after the United States and China. This figure has grown dramatically from $3 trillion in 2015, highlighting the escalating scale of this digital danger.

A significant portion of this crime comes from ransomware attacks, which currently inflict around $20 billion in damage each year with an astonishing 4,000 attacks occurring daily. Groups like LockBit, BlackCat (ALPHV), operating out of Russia, are responsible for many of these incidents – notably the Colonial Pipeline attack costing $4.4 million and MGM casinos suffering a loss of $100 million.

Beyond ransomware, state-sponsored actors contribute substantially to this economy. Groups like Russia’s APT28 (Fancy Bear) and APT29 (Cozy Bear) have been implicated in election interference campaigns, while China’s APT1 Unit 61398 and APT10 are known for stealing intellectual property. North Korea's Lazarus Group has successfully stolen billions of dollars through attacks on banks and cryptocurrency exchanges.

Iran’s APT33/34 groups target oil and gas infrastructure, demonstrating the diverse range of motivations behind these cyberattacks. Furthermore, the existence of powerful spyware like NSO Pegasus – developed by Israeli company NSO Group – adds another layer of complexity, with governments purchasing it for $millions per government to track journalists, activists, and politicians.

Zero-Days & Supply Chain Attacks

The value of ‘zero-day’ vulnerabilities – previously unknown security flaws in software – is immense, with each one fetching millions of dollars. For example, a vulnerability in iOS was reportedly sold for $2 million to Zerodium, while a Chrome exploit garnered $500,000.

The NSA has been known to hoard such vulnerabilities, and the leaked EternalBlue exploit, used during the devastating WannaCry attack in 2017 (affecting 300,000 infected devices), further underscores the potential damage. These zero-days represent a critical weakness that attackers can exploit before developers have time to create patches.

Supply chain attacks, like the 2020 SolarWinds breach, demonstrate how compromised software updates can spread rapidly and undetected. Russian intelligence agency SVR infiltrated SolarWinds’ Orion platform, compromising 18,000 organizations including US government agencies and Fortune 500 companies for nine months with no detection.

Insider Threats & The Future of Cybercrime

Human error and malicious insiders represent a significant source of cyberattacks, estimated to cost $6 billion annually. This includes data leaks caused by Edward Snowden’s 2013 NSA leaks, Chelsea Manning's WikiLeaks disclosures, and instances of disgruntled employees sabotaging systems.

Looking ahead, the rise of artificial intelligence (AI) is creating a new ‘cyber arms race’. AI tools like ChatGPT can now be used to write malware, while GPT-4’s capabilities are being exploited for sophisticated phishing campaigns, demanding ever more advanced defenses.

Quantum computing poses an existential threat to current encryption methods. As quantum computers become powerful enough, they will be able to break widely used algorithms like RSA, necessitating a ‘post-quantum migration’ – the development and implementation of new cryptographic standards. Finally, the proliferation of insecure IoT devices creates massive botnets, such as Mirai 2016 which exploited DVRs and cameras to launch devastating DDoS attacks.

Frequently asked questions

Try it live

Everything above runs in your browser — open Blockchain Consensus and change the parameters while it is running. Nothing is installed, nothing is uploaded, the whole model lives in one tab.