Learning Objectives

By the end of this chapter, you will be able to:

  • Define computer sabotage and cybercrime.
  • Differentiate between hackers, crackers, and other types of cybercriminals.
  • Identify common types of computer sabotage and computer crime.
  • Describe measures to protect against cybercrime.
  • Explain how cybercrime is reported and punished in Nepal.

Computer Sabotage and Cybercrime

Computer sabotage is any act of malicious destruction or disruption to a computer system. Cybercrime is a broader term that refers to any crime that involves a computer and a network.

A computer can be the target of a crime (hacking a server), the tool used to commit it (sending phishing messages), or simply hold evidence of it (chat logs of a fraud).

Types of Perpetrators

  • Hacker: Originally, a hacker was a creative programmer. Today, the term is often used to describe someone who illegally breaks into computer systems.
  • Cracker: A person who breaks into a computer system with malicious intent (e.g., to steal data or cause damage).
  • Script Kiddie: An amateur cracker who uses pre-made tools to attack systems.
  • Insider: An employee or former employee who uses their authorized access to carry out a crime.
  • Hacktivist: Attacks systems to promote a political or social cause, often by defacing websites.
  • Organized cybercriminals: Groups that run large-scale fraud and ransomware operations for profit.
  • Cyberterrorist / state-sponsored attacker: Targets critical infrastructure such as power, banking, or government systems.

White, black, and grey hats

Type Intent
White hat Ethical hackers hired to find and fix weaknesses (with permission)
Black hat Break in illegally for personal gain or damage
Grey hat Break in without permission but without clear malicious intent

Forms of Computer Sabotage

  • Malware attacks — viruses, worms, and ransomware that damage or lock data.
  • Logic bomb — hidden code that triggers damage when a condition is met (for example, when a programmer’s name is removed from the payroll).
  • Denial-of-Service (DoS / DDoS) — overloading a website or server so genuine users cannot use it.
  • Data diddling — secretly changing data before or during input (e.g., altering grades or invoice amounts).
  • Website defacement — replacing a website’s content with the attacker’s message.

Common Types of Computer Crime

  • Malware: Malicious software designed to disrupt computer operation, gather sensitive information, or gain access to private computer systems. (This is covered in more detail in a later section).
  • Denial-of-Service (DoS) Attack: An attempt to make a machine or network resource unavailable to its intended users by flooding it with traffic.
  • Phishing: An attempt to acquire sensitive information such as usernames, passwords, and credit card details by masquerading as a trustworthy entity in an electronic communication.
  • Identity theft: Using someone’s personal details to open accounts, take loans, or impersonate them online.
  • Online fraud and scams: Fake online shops, lottery and prize scams, and investment scams.
  • Social media account hacking: Taking over accounts to scam the victim’s friends or demand money.
  • Cyberbullying and cyberstalking: Harassing, threatening, or blackmailing people online.
  • Ransomware: Encrypting a victim’s files and demanding payment for the key.
  • Data breach / data theft: Stealing customer databases for sale or misuse.
  • Software piracy: Illegally copying and distributing software.

Protection Against Cybercrime

For individuals

  • Use strong, unique passwords and turn on two-factor authentication.
  • Never share OTPs or PINs, even with someone claiming to be from your bank or wallet.
  • Check links and sender addresses before clicking; avoid “too good to be true” offers.
  • Keep devices and apps updated and install antivirus software.

For organizations

  • Limit access rights and remove accounts when employees leave (reduces insider risk).
  • Use firewalls, intrusion detection, and regular security audits.
  • Keep offline backups to recover from ransomware.
  • Train staff to recognize phishing.
  • Maintain logs so incidents can be investigated.

Cybercrime in Nepal

  • The Electronic Transactions Act, 2063 (2008) criminalizes unauthorized access to computer systems, damaging or altering data, computer fraud, and publishing illegal material online.
  • The Nepal Police Cyber Bureau, established in 2018, investigates cybercrime. Victims can report incidents to the bureau or their nearest police office.
  • Commonly reported cases include social media account hacking, online fraud and fake shops, harassment and blackmail using private photos, and scams asking victims to share wallet OTPs.

Business Scenario

An accountant at a trading company in Birgunj receives an email that appears to come from the owner, asking for an urgent supplier payment to a new bank account. The email address differs by one letter. Because the company has a rule that new payment details must be confirmed by phone, the accountant calls the owner and discovers the fraud. This business email compromise attempt fails because of a simple administrative control.

Summary

Computer sabotage and cybercrime are serious threats. They are carried out by a range of perpetrators, from amateur script kiddies and hacktivists to sophisticated criminal groups and malicious insiders. Sabotage includes malware, logic bombs, denial-of-service attacks, data diddling, and defacement; wider cybercrime includes phishing, identity theft, online fraud, ransomware, and cyberbullying. Protecting against these threats requires technical controls, careful user behavior, and strong procedures, while laws such as Nepal’s Electronic Transactions Act provide for investigation and punishment.

Key Takeaways

  • Cybercrime is any crime involving a computer and a network; sabotage is deliberate damage or disruption.
  • A cracker is a hacker with malicious intent; white-hat hackers work ethically with permission.
  • Insiders are dangerous because they already have authorized access.
  • Phishing, identity theft, online fraud, and ransomware are common modern crimes.
  • In Nepal, cybercrime is punishable under the Electronic Transactions Act and investigated by the Nepal Police Cyber Bureau.

Discussion Questions

  1. What is the difference between a hacker and a cracker?
  2. Why is an insider often the most dangerous type of threat?
  3. Have you ever received a phishing email? What were the signs that it was not legitimate?

Exam-Style Questions

Short answer

  1. Define cybercrime and computer sabotage.
  2. Differentiate between white-hat and black-hat hackers.
  3. What is phishing? How can you protect yourself from it?

Long answer

  1. Explain the different types of computer crime with examples.
  2. Discuss the measures individuals and organizations can take to prevent cybercrime, with reference to Nepal’s legal framework.