Vendor Communication Themes in Darknet Ransomware-as-a-Service (RaaS) Advertisements
Document Type
Article
Publication Date
2025
Keywords
Ransomware; Ransomware-as-a-Service (RaaS), Darknet markets, Cybercrime
Digital Object Identifier (DOI)
https://doi.org/10.1016/j.chb.2025.108571
Abstract
In online illicit marketplaces, the Ransomware-as-a-Service (RaaS) industry is experiencing rapid growth. While traditionally ransomware was deployed by adept cybercriminals to lock or encrypt network assets, subsequently demanding a ransom for the decryption key, at present, RaaS is being marketed on darknet platforms as a pre-built, user-friendly form of ransomware. This study employs a thematic analysis of RaaS advertisements on darknet market to discern patterns in vendor communication with potential customers. The most common theme identified was victimization, appearing in 70% of the dataset, underscoring the nature of RaaS products as instruments of criminal activity. Victimization was commonly combined with other themes to persuade users to make a purchase. These findings provide critical insights into the commodification of ransomware and reveal the strategic mechanisms employed by vendors to attract both novice and experienced cybercriminals. The growing trend of RaaS highlights the ongoing professionalization of cybercriminal activities and underscores the necessity of cross-disciplinary research in addressing network security concerns.
Was this content written or created while at USF?
Yes
Citation / Publisher Attribution
Computers in Human Behavior, v. 165, art. 108571
Scholar Commons Citation
Fisher, Taylor; Pieri, Zacharias; Howell, C. Jordan; O'Malley, Roberta; Tremblay, Lauren; and Dawoud, Mohamed, "Vendor Communication Themes in Darknet Ransomware-as-a-Service (RaaS) Advertisements" (2025). Criminology Faculty Publications. 63.
https://digitalcommons.usf.edu/cjp_facpub/63
