Un negocio floreciente: crecimiento y transformación de la amenaza del ransomware en Europa (2014-2024)
DOI:
https://doi.org/10.30827/rec.12.35136Keywords:
tendenciasAbstract
This study examines the evolution of ransomware in Europe between 2014-2024, focusing on its consolidation as one of the most relevant cyberthreats for the European Union (EU). It analyses information sources published by ENISA and Europol to identify the main evolutionary stages, changes in the business model, the modus operandi of the attacks, and the role of contextual factors such as the Covid-19 pandemic or the war in Ukraine. The study concludes that ransomware is the result of a rational technical and strategic evolution on the part of cybercriminals, who have adapted to the environment to maximize their profits. It also discusses some of the persistent challenges facing EU institutional responses, such as underreporting by victims, a lack of international coordination, and the absence of unified legislation.
References
Aebi, M. (2022). Lessons Learned from a Council of Europe’s Conference on Measuring Cybercrime. Dentro de Eleven (ed.), Measuring Cybercrime in Europe: The Role of Crime Statistics and Victimisation Surveys (7-18). Recuperado de: https://serval.unil.ch/resource/serval:BIB_7A3EC1088F92.P001/REF.pdf
Agencia de ciberseguridad y seguridad estructural de América (CISA). (15 de febrero de 2018). Petya Ransomware [Recorte de prensa]. Recuperado de: https://www.cisa.gov/news-events/alerts/2017/07/01/petya-ransomware
Anderson, R., Barton, C., Böhme, R., Clayton, R., Gañán, C., Grasso, T., Levi, M., Moore, T. y Vasek, M. (2019). Measuring the Changing Cost of Cybercrime. Apollo - University of Cambridge Repository, 1-32. https://doi.org/10.17863/CAM.41598
Arabo, A., Dijoux, R., Poulain, T. y Chevalier, G. (2020). Detecting Ransomware Using Process Behavior Analysis. Procedia Computer Science, 1c8(2020), 289-296. https://doi.org/10.1016/j.procs.2020.02.249
Auto de la Audiencia Nacional 672/2024 (Sala de lo penal, Sección 19), de 2 de diciembre de 2024 (recurso 71/2024). Recuperado de: https://www.poderjudicial.es/search/AN/openDocument/a61dbf029d5b5424a0a8778d75 e36f0d/20241213
Bates, J. (1990). Trojan Horse: AIDS Information Introductory Diskette Version 2.0. Virus Bulletin: Covering the global threat landscape. Enero 1990, 3-6. Recuperado de: https://www.virusbulletin.com/uploads/pdf/magazine/1990/199001.pdf
Beaman, C., Barkworth, A., A., Akande, T., Hakak, S. y Khurram, M. (2021). Ransomware: Recent advances, analysis, challenges and future research directions. Computers & Security, 111, 1024S0, 1-22. https://doi.org/10.1016/j.cose.2021.102490
Beerman, J., Berent, D, Falter, Z. y Bhunia, S. (2023). A Review of Colonial Pipeline Ransomware Attack. International Symposium on Cluster, Cloud and Internet Computing Workshops, 23rd, 8-15. 10.1109/CCGridW59191.2023.00017
Bravo, P. y García, D. (2011). Proactive detection of Kernel-mode Rootkits. International Conference on Availability, Reliability and Security, Sixth, 515-520. 10.1109/ARES.2011.78.
Campobasso, M. y Allodi, L. (2023). Know Your Cybercriminal: Evaluating Attacker Preferences by Measuring Profile Sales on an Active, Leading Criminal Market for User Impersonation at Scale. Proceedings of the 32nd USENIX Security Symposium. Berkeley, CA.
Cartwright, A. y Cartwright, E. (2023). The Economics of Ransomware Attacks on Integrated Supply Chain Networks. Digital Threats: Research and Practice, 4(4) art. 5c, 1-14. https://doi.org/10.1145/3579647
Chainalysis. (19 de enero de 2023). Ransomware Revenue Down As More Victims Refuse to Pay [Informe técnico]. Recuperado de: https://www.chainalysis.com/blog/crypto- ransomware-revenue-down-as-victims-refuse-to-pay/
Chainalysis. (5 de febrero de 2025). 35% Year-over-Year Decrease in Ransomware Payments, Less than Half of Recorded Incidents Resulted in Victim Payments [Informe técnico]. Recuperado de: https://www.chainalysis.com/blog/crypto-crime-ransomware- victim-extortion-2025/
Cohen, L. y Felson, M. (1979). Social Change and Crime Rate Trends: A Routine Activity Approach. American Sociological Review, 44(4), 588-608. https://doi.org/10.2307/2094589
Colarik, A. y Janczewski, L. (2007). Introductory Chapter. Dentro IGY Global, Cyber Warfare and Cyber Terrorism (xiii-xxx). Recuperado de: https://www.andrewcolarik.com/docs/IntroductiontoCyberWarfareandCyberTerrorism.pd f
Cornish, D. y Clarke, R. (1986). Introduction. Dentro Cornish, D. y Clarke, R. (eds.), The Reasoning Criminal: Rational Choice Perspectives on Offending (1-16). https://doi.org/10.4324/9781315134482
Crypto.com. (19 de febrero de 2025). ¿Qué son las altcoins? Más allá de Bitcoin y Ethereum. Recuperado el 1 de junio de 2025 de: https://crypto.com/es/university/what-are-altcoins
Datta, P. y Acton, T. (2024). Ransomware and Costa Rica’s national emergency: A defense framework and teaching case. Journal of Information Technology Teaching Cases, 14(1), 56-67. https://doi.org/10.1177/20438869221149042
De la Cruz, A. y Pastrana, S. (2024). Understanding crypter-as-a-service in a popular underground Marketplace. IEEE European Symposium on Security and Privacy Workshops, 2024, 85-90. 10.1109/EuroSPW61312.2024.00016
De los Llanos, A. (Abril de 2024). Ingeniería Inversa en Ciberseguridad: Desentrañando el Código. Minery Report. Recuperado el 1 de junio de 2025: https://mineryreport.com/blog/ingenieria-inversa-ciberseguridad-desentranando-
codigo/#:~:text=%C2%BFQu%C3%A9%20es%20la%20Ingenier%C3%ADa%20Inversa,me jorar%20las%20medidas%20de%20seguridad
Erquiaga, M. (2011). Botnets: Mecanismos de Control y de propagación. Congreso Argentino de Ciencias de la Computación, XVII, 1076-1085. Recuperado de: https://sedici.unlp.edu.ar/bitstream/handle/10915/18764/Documento_completo.pdf?seq uence=1
Estes, R. (2025). Dr. Joseph L. Popp Jr. and The First-Ever Ransomware – The AIDS Trojan [Informe técnico]. Watchguard. Recuperado de: https://watchguard.widen.net/s/fqtrh2jc8r/report_ransomware_aids_trojan
Eurojust y Europol (31 de enero de 2025). Common Challenges in Cybercrime. 2024 review by Eurojust and Europol, Publication Office of the European Union, Luxembourg. Recuperado de:
https://www.Europol.europa.eu/cms/sites/default/files/documents/Common_Challenges
_in_Cybercrime_2024.pdf
European Network and Information Security Agency (ENISA). (8 de enero de 2013a). ENISA Threat Landscape: Responding to the Evolving Threat Environment. Recuperado de: https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Threat%20Lands cape%20Published.pdf
European Union Agency for Cibersecurity (ENISA). (19 de octubre de 2023). Enisa Threat Landscape 2023. Recuperado de: https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Threat%20Lands cape%202023.pdf
European Union Agency for Cibersecurity (ENISA). (19 de septiembre de 2024a). Enisa Threat Landscape 2024. Recuperado de: https://www.enisa.europa.eu/sites/default/files/2024-
/ENISA%20Threat%20Landscape%202024_0.pdf
European Union Agency for Cibersecurity (ENISA). (20 de octubre de 2020). Ransomware: ENISA Threat Landscape. Recuperado de: https://www.enisa.europa.eu/sites/default/files/publications/ETL2020%20-
%20Ransomware%20A4.pdf
European Union Agency for Cibersecurity (ENISA). (27 de octubre de 2021b). Enisa Threat Landscape 2021. Recuperado de: https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Threat%20Lands cape%202021.pdf
European Union Agency for Cibersecurity (ENISA). (29 de julio de 2021a). ENISA Threat Landscape for Supply Chain Attacks. Recuperado de: https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Threat%20Lands cape%20for%20Supply%20Chain%20Attacks.pdf
European Union Agency for Cibersecurity (ENISA). (29 de julio de 2022a). Enisa Threat Landscape for Ransomware Attacks. Recuperado de: https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Threat%20Lands cape%20for%20Ransomware%20Attacks.pdf
European Union Agency for Cibersecurity (ENISA). (3 de diciembre de 2024b). 2024 Report on the State of Cybersecurity in the Union. Recuperado de: https://www.enisa.europa.eu/sites/default/files/2024- 11/2024%20Report%20on%20the%20State%20of%20the%20Cybersecurity%20in%20th e%20Union.pdf
European Union Agency for Cibersecurity (ENISA). (3 de noviembre de 2022c). Enisa Threat Landscape 2022. Recuperado de: https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Threat%20Lands cape%202022.pdf
European Union Agency for Cibersecurity (ENISA). (6 de julio de 2022b). ENISA Cybersecurity Threat Landscape Methodology. Recuperado de: https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20CTL%20Methodol ogy%20RECAST.pdf
European Union Agency for Network and Information Security (ENISA). (11 de diciembre de 2013b). ENISA Threat Landscape 2013: Overview of current and emerging cyber-threats. Recuperado de:
https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Threat%20Lands cape%202013.pdf
European Union Agency for Network and Information Security (ENISA). (27 de enero de 2015). ENISA Threat Landscape 2014 Overview of current and emerging cyber-threats. Recuperado de:
https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Threat%20Lands cape%202014.pdf
European Union Agency For Network And Information Security (ENISA). (27 de enero de 2016). ENISA Threat Landscape 2015. Recuperado de: https://www.enisa.europa.eu/sites/default/files/publications/ETL%202015.pdf
European Union Agency For Network and Information Security (ENISA). (8 de febrero de 2017). ENISA Threat Landscape Report 201c: 15 Top Cyber-Threats and Trends. Recuperado de: https://www.enisa.europa.eu/sites/default/files/publications/WP2016%201- 2%201%20Annual%20Threat%20Landscape%20Report.pdf
European Union Agency For Network and Information Security (ENISA). (15 de enero de 2018). ENISA Threat Landscape Report 2017: 15 Top Cyber-Threats and Trends. Recuperado de:
https://www.enisa.europa.eu/sites/default/files/publications/WP2017%20O.1.2.1%20-
%20ENISA%20Threat%20Landscape%202017.pdf
European Union Agency For Network and Information Security (ENISA). (28 de enero de 2019). ENISA Threat Landscape Report 2018: 15 Top Cyberthreats and Trends. Recuperado de:
https://www.enisa.europa.eu/sites/default/files/publications/WP2018%20O.1.2.1%20-
%20ENISA%20Threat%20Landscape%202018.pdf
Europol (13 de septiembre de 2023). Cyber-attacks: the apex of crime-as-a-service. Europol Spotlight Report series, Publications Office of the European Union, Luxembourg. Recuperado de:
https://www.Europol.europa.eu/cms/sites/default/files/documents/Spotlight%20Report% 20-%20Cyber-attacks%20the%20apex%20of%20crime-as-a-service.pdf
Europol (2 de junio de 2014b). International action against 'Gameover Zeus' botnet and 'CryptoLocker' ransomware: The Hague, the Netherlands [Nota de prensa]. Recuperado de: https://www.Europol.europa.eu/media-press/newsroom/news/international-action- against-gameover-zeus-botnet-and-cryptolocker-ransomware
Europol (26 de julio de 2022). Hit by ransomware? No More Ransom now offers 136 free tools to rescue your files: As the initiative turns six, over 10 million people have downloaded the decryption tolos [Nota de prensa]. Recuperado de: https://www.Europol.europa.eu/media-press/newsroom/news/hit-ransomware-no-more- ransom-now-offers-136-free-tools-to-rescue-your-files
Europol. (11 de noviembre de 2021). Internet Organised Crime Threat Assessment (IOCTA) 2021. Recuperado de: https://www.Europol.europa.eu/cms/sites/default/files/documents/internet_organised_cr ime_threat_assessment_iocta_2021.pdf
Europol. (17 de julio de 2023). Internet Organised Crime Threat Assessment (IOCTA) 2023, Publications Office of the European Union, Luxembourg. Recuperado de: https://www.Europol.europa.eu/cms/sites/default/files/documents/IOCTA%202023%20-
%20EN_0.pdf Europol. (18 de septiembre de 2018). Internet Organised Crime Threat Assessment (IOCTA) 2018. Recuperado de: https://www.Europol.europa.eu/cms/sites/default/files/documents/iocta2018.pdf
Europol. (22 de julio de 2024). Internet Organised Crime Threat Assessment (IOCTA) 2024, Publications Office of the European Union, Luxembourg. Recuperado de: https://www.Europol.europa.eu/cms/sites/default/files/documents/Internet%20Organise d%20Crime%20Threat%20Assessment%20IOCTA%202024.pdf
Europol. (27 de septiembre de 2017). Internet Organised Crime Threat Assessment (IOCTA) 2017. Recuperado de: https://www.Europol.europa.eu/cms/sites/default/files/documents/iocta2017.pdf
Europol. (28 de septiembre de 2016). IOCTA 201c Internet Organised Crime Threat Assessment. Recuperado de: https://www.Europol.europa.eu/cms/sites/default/files/documents/Europol_iocta_web_2 016.pdf
Europol. (29 de septiembre de 2014a). The Internet Organised Crime Threat Assessment (iOCTA) 2014. Recuperado de: https://www.Europol.europa.eu/cms/sites/default/files/documents/Europol_iocta_web.pd f
Europol. (30 de septiembre de 2015). The Internet Organised Crime Threat Assessment (IOCTA) 2015. Recuperado de: https://www.Europol.europa.eu/cms/sites/default/files/documents/Europol_iocta_web_2 015.pdf
Europol. (5 de octubre de 2020). Internet Organised Crime Threat Assessment (IOCTA) 2020. Recuperado de: https://www.Europol.europa.eu/cms/sites/default/files/documents/internet_organised_cr ime_threat_assessment_iocta_2020.pdf
Europol. (9 de octubre de 2019). Internet Organised Crime Threat Assessment (IOCTA) 201S. Recuperado de: https://www.Europol.europa.eu/cms/sites/default/files/documents/iocta_2019.pdf
EUROSTAT. (17 de diciembre de 2024). Digital economy and society statistics -households and individuals: Statistics Explained [Informe técnico]. Recuperado de: https://ec.europa.eu/eurostat/statistics-explained/SEPDF/cache/33472.pdf
EUROSTAT. (Septiembre de 2020). Digital economy and society statistics -households and individuals/es: Statistics Explained [Informe técnico]. Recuperado de: https://ec.europa.eu/eurostat/statistics-explained/SEPDF/cache/62036.pdf
Fiscalía General del Estado (FGE). (2021). Memoria 2021. Ministerio de justicia, Gobierno de España. Recuperado de: https://www.fiscal.es/memorias/memoria2021/FISCALIA_SITE/recursos/pdf/MEMFIS21.p df
Ghanbari, H., Koskinen, K., y Wei, Y. (2024). From SolarWinds to Kaseya: The rise of supply chain attacks in a digital world. Journal of Information Technology Teaching Cases, 0(0). https://doi.org/10.1177/20438869241299823
Hetro, A. (2021). An interdisciplinary view of social engineering: A call to action for research. Computers in Human Behavior Reports, 4(10012c), 1-8. https://doi.org/10.1016/j.chbr.2021.100126
Instituto Nacional de Ciberseguridad (INCIBE). (26 de febrero de 2022). NVIDIA sufre un incidente de ciberseguridad. Recuperado el 2 de junio de 2025 de: https://www.incibe.es/incibe-cert/publicaciones/bitacora-de-seguridad/nvidia-sufre-un- incidente-de-ciberseguridad
Instituto Nacional de Ciberseguridad (INCIBE). (4 de Julio de 2023). Ataques DDoS: ¿qué son y qué puedo hacer para proteger mi empresa?. Recuperado el 1 de junio de 2025 de: https://www.incibe.es/empresas/blog/ataques-ddos-que-son-y-que-puedo-hacer-para- proteger-mi-empresa
Instituto Nacional de Ciberseguridad (INCIBE). (s.f.). NIS2: lo que necesitas saber. Recuperado el 1 de junio de 2025 de: https://www.incibe.es/incibe-cert/sectores- estrategicos/NIS2-necesitas-saber
International Criminal Police Organization (INTERPOL). (8 de noviembre de 2021). Una operación mundial conjunta contra el ransomware se salda con detenciones y el desmantelamiento de una red delictiva [Nota de prensa]. Recuperado de: https://www.interpol.int/es/Noticias-y-acontecimientos/Noticias/2021/Una-operacion- mundial-conjunta-contra-el-ransomware-se-salda-con-detenciones-y-el-
desmantelamiento-de-una-red-delictiva
Internet Crime Complaint Center (IC3). (27 de septiembre de 2018). Cyber Actors Increasingly Exploit The Remote Desktop Protocol to Conduct Malicious Activity [Nota de prensa]. Recuperado de: https://www.ic3.gov/PSA/2018/PSA180927
Investing.com. (2025). Bitcoin. Consultado el 2 de junio de 2025 de: https://es.investing.com/crypto/bitcoin/chart
Karim, N. (2024). Comprehensive Analysis of Ransomware Evolution and Countermeasures in the Era of Digital Transformation. International Journal of Advanced Cybersecurity Systems, Technologies, and Applications, 8(12), 20-30. Recuperado de: https://theaffine.com/index.php/IJACSTA/article/view/3/3
Kemp, S. (2024). Las Ciberestafas: Tendencias, Infractores, Víctimas y Prevención. Barcelona: Atelier Libros Jurídicos. ISBN: 9788410174054
Kumar, R. (2022). Cloud Cybersecurity: Navigating Evolving Threats and Architecting Resilient Defenses. Journal of Software Engineering and Simulation, 8(8), 21-29. 10.35629/3795-08082129
Lusthaus, J. (2018). Industry of Anonymity: Inside the Business of Cybercrime. Harvard University Press. https://doi.org/10.2307/j.ctv24trdtf
Maurya, A., Kumar, N., Agrawal, A. y Khan, R. (2018). Ransomware: Evolution, Target and Safety Measures. International Journal of Computer Sciences and Engineering, 6(1), 80-85. Recuperado de: https://ijcseonline.org/pdf_paper_view.php?paper_id=1636C12-IJCSE- 02742.pdf
McAfee Labs. (2012). McAfee Threats Report: Fourth Quarter 2012 [Informe técnico]. McAfee. Recuperado de: https://scadahacker.com/library/Documents/Threat_Intelligence/McAfee%20-
%20Threat%20Report%202012-4Q.pdf
McAfee Labs. (2015). McAfee Labs Threats Report [Informe técnico]. McAfee. Recuperado de: https://scadahacker.com/library/Documents/Threat_Intelligence/McAfee%20-%20Threat%20Report%202015-1Q.pdf
Miró, F. (2021). Crimen, cibercrimen y Covid-19: desplazamiento (acelerado) de oportunidades y adaptación situacional de ciberdelitos. IDP. Revista de Internet, Derecho y Política, núm.32, 1-17. https://doi.org/10.7238/idp.v0i32.373815
Miró, F. (2022). Covid-19 and Cybercrime: What We Know, What We Do Not Know and What We Shall Measure. En Eleven (ed.), Measuring Cybercrime in Europe: The Role of Crime Statistics and Victimisation Surveys (25-36). Recuperado de: https://serval.unil.ch/resource/serval:BIB_7A3EC1088F92.P001/REF.pdf
Nagar, G. (2024). The Evolution of Ransomware: Tactics, Techniques, and Mitigation Strategies. International Journal of Scientific Research and Management, 12(c), 1282-1298. http://dx.doi.org/10.2139/ssrn.4881213
Office of Public Affairs (OPA). (2021). Department of Justice Seizes :2.3 Million in Cryptocurrency Paid to the Ransomware Extortionists Darkside [Nota de prensa]. Recuperado de: https://www.justice.gov/archives/opa/pr/department-justice-seizes-23- million-cryptocurrency-paid-ransomware-extortionists-darkside
O'Kane, P., Sezer, S. y Carlin, D. (2018). Evolution of ransomware. The Institution of Engineering and Techology: IET Networks. 7(5), 321-327. 10.1049/iet-net.2017.0207
Oz, H., Aris, A., Levi, A. y Selcuk, A. (2022). A Survey on Ransomware: Evolution, Taxonomy, and Defense Solutions. ACM Comput. Surv. 54, 11s(238), 1-37. https://doi.org/10.1145/3514229
Paternoster, C., Nazzari, M., Jofre, M. y Uberti, T. (2024). Inside the Leak: Exploring the Structure of the Conti Ransomware Group. CrimRxiv. https://doi.org/10.21428/cb6ab371.75a348ed
Pattnaik, N., Nurse, J., Turner, S., Mott, G., MacColl, J., Huesch, P. y Sullivan, J. (2023). It's more than just money: The real-world harms from ransomware attacks. arXiv, 1-15. https://doi.org/10.48550/arXiv.2307.02855
Policía Nacional. (27 de enero de 2023). Desmantelada una infraestructura del grupo criminal HIVE dirigida a realizar ataques de ransomware por todo el mundo [Nota de prensa]. Recuperado de: https://www.policia.es/_es/comunicacion_prensa_detalle.php?ID=15243
Policía Nacional. (27 de septiembre de 2013). Desarticulada la rama económica responsable del 'virus de la Policía' y que había comprometido la seguridad de 1.500 empresas en España [Nota de prensa]. Recuperado de: https://www.policia.es/_es/comunicacion_prensa_detalle.php?ID=6790
Policía Nacional. (30 de junio de 2014). 'La cooperación internacional y la creación de una red de expertos policiales son claves en la lucha contra la ciberdelincuencia' [Nota de prensa]. Recuperado de: https://www.policia.es/_es/comunicacion_prensa_detalle.php?ID=6650
Rawat, A., Mehlawat, M. y Garg, N. (2023). Achieving Anonymity with the help of TOR (TOR: A Review). International Journal of Advances in Engineering and Management, 5(4), 778- 785. 10.35629/5252-0504778785
Razaulla, S., Fachkha, C., Markarian, C., Gawanmeh, A., Mansoor, W., Fung, B. y Assi, C. (2023). The Age of Ransomware: A Survey on the Evolution, Taxonomy, and Research Directions. IEEE Access, 11, 40698-40723. 10.1109/ACCESS.2023.3268535
Richardson, R. y North, M. (2017) Ransomware: Evolution, Mitigation and Prevention. Faculty Publications, 13(1), 10-21. Recuperado de: https://digitalcommons.kennesaw.edu/facpubs/4276/
Ruellan, E., Paquet-Clouston, M. y Garcia, S. (2024). Conti Inc.: understanding the internal discussions of a large ransomware-as-a-service operator with machine learning. Crime Science, 13(1c), 1-13. https://doi.org/10.1186/s40163-024-00212-y
Sentencia de la Audiencia Nacional 14/2016 (Sala de lo penal, Sección 49), de 3 de marzo de 2016 (recurso 2/2016). Recuperado de: https://www.poderjudicial.es/search/AN/openDocument/dd58ab938347e166/20160406
Sentencia de la Audiencia Nacional 28/2016 (Sala de lo penal, Sección 49), de 4 de julio de 2016 (recurso 2/2016). Recuperado de: https://www.poderjudicial.es/search/AN/openDocument/d0be707915fb6c50/20160714
Stibbe, D., Ruiter, S., Steenbeek, W., & Moneva, A. (2025). Rational Choice on a Hacker Forum: The Effect of Risk and Reward Cues on Target Selection for Account Hijacking. Deviant Behavior, 46(9), 1172–1193. https://doi.org/10.1080/01639625.2025.2459699
Tor project. (2025). Tor project. Consultado el 2 de junio de 2025 de: https://www.torproject.org/
Universidad Internacional de la Rioja (UNIR). (1 de Julio de 2021). ¿Qué es una VPN?: funciones, tipos e importancia. Recuperado el 1 de junio de 2025 de: https://www.unir.net/revista/ingenieria/que-es-vpn/
Villamor, A. (2023). ENISA’s Threat Landscape and the Effect of Ransomware. Isaca, 2(2023), 1-4. Recuperado de: https://www.isaca.org/-
/media/files/isacadp/project/isaca/articles/journal/2023/volume-2/enisas-threat- landscape-and-the-effect-of-ransomware_joa_eng_0423.pdf
Wagner, K. y Esbeck, K. (2021). Evolution of ransomware [Informe técnico]. MITRE.
Wang, Z., Sun, L. y Zhu, H. (2020). Defining Social Engineering in Cybersecurity. IEEE Access, 8, 85094-85115. 10.1109/ACCESS.2020.2992807
Wyke, J. y Ajjan, A. (2015). The Current State of Ransomware [Informe técnico]. Sophos. Recuperado de: https://www.sophos.com/en- us/medialibrary/PDFs/technical%20papers/sophos-current-state-of-ransomware.pdf
Yaacoub, J.-P., Noura, H., Salman, O., y Chehab, A. (2021). A Survey on Ethical Hacking: Issues and Challenges. arXiv, 1-46. Recuperado de: http://export.arxiv.org/pdf/2103.15072
Yuryna, L., Wall, D., Lang, M. y Oddson, B. (2020). An empirical study of ransomware attacks on organizations: an assessment of severity and salient factors affecting vulnerability. Journal of Cybersecurity, c(1), 1-18. https://doi.org/10.1093/cybsec/tyaa023
Yuxing, D., Matthaios, M., Guo, V., Invernizzi, L., McRoberts, K., Bursztein, E., Levin, J., Levchenko, K., Snoeren, A. y McCoy, D. (2018). Tracking Ransomware End-to-end. IEEE Symposium on Security and Privacy. 2018, 618-631. 10.1109/SP.2018.00047
Zavřel, J., Koutenský, M., Dolejška, D. y Veselý, V. (2025). Tumbling down the stairs: Exploiting a tumbler’s attempt to hide with ordinary-looking transactions using wallet fingerprinting. Forensic Science International: Digital Investigation, 52(Supplement) núm.3018cS, 1-9. https://doi.org/10.1016/j.fsidi.2025.301869
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Iker Arévalo Espasandín, Steven Kemp
This work is licensed under a Creative Commons Attribution 4.0 International License.
Esta obra está bajo una licencia internacional Creative Commons Atribución 4.0.
