We present in this work an economic analysis of ransomware, a relatively new form of cyber-enabled extortion. We look at how the illegal gains of the criminals will depend on the strategies they use, examining uniform pricing and price discrimination. We also explore the welfare costs to society of such strategies. In addition, we present the results of a pilot survey which demonstrate proof of concept in evaluating the costs of ransomware attacks. We discuss at each stage whether the different strategies we analyse have been encountered already in existing malware, and the likelihood of them being implemented in the future. We hope this work will provide some useful insights for predicting how ransomware may evolve in the future.
Bibliographical notePublished by the Royal Society under the terms of the Creative
Commons Attribution License http://creativecommons.org/licenses/by/4.0/, which permits unrestricted use, provided the original author and source are credited.
FunderThis project has received funding from the European Unions Horizon 2020 research and innovation programme,under grant agreement no. 700326 (RAMSES project). The authors also want to thank EPSRC for project EP/P011772/1,on the EconoMical, PsycHologicAl and Societal Impact of RanSomware (EMPHASIS), which supported this work
- Price discrimination
- Willingness to pay
ASJC Scopus subject areas