4 papers
A Bulletproof Business? Towards Detecting Infrastructure-as-a-Service Offerings on Telegram
Roy Ricaldi, Kristiyan Kyurkchiev, Irdin Pekaric
Cybercriminal operations increasingly depend on reusable digital infrastructure---including hosting, proxies, and virtual private networks (VPNs)---rented through Cybercrime-as-a-S…
TeleHunt: A Framework and Tool for Efficient Cybercriminal Community Discovery on Telegram
Roy Ricaldi, Victor Asanache, Luca Allodi
This paper presents TeleHunt, a framework and tool for evaluating the effectiveness of different strategies to discover cybercriminal communities on Telegram. TeleHunt employs a se…
Topical Shifts in the Dark Web: A Longitudinal Analysis of Content from the Cybercrime Ecosystem
Roy Ricaldi, Maximilian Schafer, Philipp Zech +3
The dark web hosts a dynamic ecosystem of cybercrime forums and marketplaces that adapt to law enforcement pressure, technological change, and economic incentives. Prior research h…
Where is Dmitry going? Framing 'migratory' decisions in the criminal underground
Luca Allodi, Roy Ricaldi, Jai Wientjes +1
The cybercriminal underground consists of hundreds of forum communities that function as marketplaces and information-exchange platforms for both established and wannabe cybercrimi…