Cybercrime & Safeguards Grade 12
Types of cybercrime, the people who commit them, their effects on individuals and organisations, and the safeguards used to prevent them.
T2Term 2 · Cybercrime Types & Safeguards
Computer Criminals
| Type | Description |
|---|---|
| Hacker | Gains unauthorised access to systems. White hat (ethical) vs Black hat (malicious). |
| Cracker | Breaks software protection or encryption for illegal access or distribution |
| Script kiddie | Uses pre-written tools without understanding them; less skilled |
| Insider threat | Current or former employee who misuses access privileges |
| Cybercriminal | Commits crime for financial gain (fraud, ransomware, identity theft) |
| Cyber gang | An organised group of criminals who work together to carry out large-scale cyberattacks |
| Virus author | A person who writes and releases malware such as viruses and worms |
Types of Cybercrime
| Crime | Description |
|---|---|
| Identity theft | Stealing personal information to impersonate someone (open accounts, get loans) |
| Phishing | Fake emails that look official to steal credentials |
| Pharming | Redirecting users to fake websites to steal information |
| Virus | Malicious code that attaches itself to a host file and needs a user action (e.g. opening the file) to spread |
| Worm | Self-replicating malware that spreads across a network on its own — no user action needed |
| Trojan (Trojan horse) | Malware disguised as legitimate, useful software; does nothing until the user opens it |
| Ransomware | Encrypts victim's data; demands payment to restore access |
| Business data theft | Stealing trade secrets, customer databases, or financial records |
| SQL Injection | Inserting malicious SQL via web forms to manipulate or steal database data |
| DDoS attack | Distributed Denial of Service — overwhelming a server with traffic to take it offline |
| Online fraud | Scams, fake auctions, advance-fee fraud (419 scams) |
| Cyberbullying | Harassment, threats or humiliation via digital channels |
| Piracy | Illegally copying, distributing or using copyrighted software/media |
| Bandwidth theft | Using someone else's network/internet connection, or hotlinking their content, without permission |
| Theft of time & services | Using an employer's computers, internet or work time for personal or unauthorised purposes |
| Botnet / zombies | A network of infected computers ("zombies") secretly controlled by an attacker, often used for DDoS attacks or spam |
| Back door | A hidden way to bypass normal security and gain remote access to a system |
| Piggybacking | Using someone else's internet connection or account without their permission (e.g. an unsecured Wi-Fi), or slipping in behind an authorised user |
| Extortion (cyber-extortion) | Threatening to damage, expose or block access to data/systems unless a payment is made (e.g. ransomware, DDoS threats) |
| Spam | Sending unsolicited bulk messages/email; wastes bandwidth and time and is often used to spread scams or malware |
Trap — virus vs worm vs Trojan
Don't call every threat "a virus" — use the term the scenario points to. A virus needs a user to open/run something to spread. A worm spreads by itself across a network, no user action needed. A Trojan just pretends to be something useful until it's opened.
Trap — phishing vs pharming
Phishing relies on the user clicking a fraudulent link. Pharming needs no user error at all — it redirects the user to a fake site even when they type the correct address, which is exactly why it's the more dangerous of the two.
Effects of Cybercrime
On Individuals
- Financial loss — stolen money or fraudulent accounts opened in your name
- Emotional distress and reputational damage
- Legal complications if identity is used for crimes
- Loss of private data (photos, documents)
On Businesses
- Financial loss from stolen funds, ransom payments, or system recovery
- Loss of competitive advantage if trade secrets are stolen
- Reputational damage and loss of customer trust
- Legal penalties for failing to protect customer data
- Operational downtime while systems are restored
Safeguards Against Cybercrime
| Safeguard | How it protects |
|---|---|
| Antivirus / Antimalware | Detects and removes malicious software |
| Firewall | Filters unauthorised network traffic |
| Encryption | Scrambles data so intercepted data is unreadable |
| Strong passwords + MFA | Makes accounts much harder to compromise |
| Regular backups | Allows recovery after ransomware or data loss |
| Software updates / patches | Fixes known vulnerabilities before criminals exploit them |
| User training / awareness | Educated users are less likely to click phishing links |
| Access control | Least-privilege principle: users only access what they need |
| Input validation | Prevents SQL injection by sanitising user input |
| Digital certificates + HTTPS | Verifies website legitimacy; encrypts all data in transit |
SA Legal Context
In South Africa, cybercrime is covered by:
- Cybercrimes Act, 2020: criminalises hacking, ransomware, online fraud, malicious communications
- POPIA (Protection of Personal Information Act): governs how personal data must be collected, stored and protected
- Electronic Communications and Transactions (ECT) Act: regulates e-commerce and online transactions