History of Cyber Crime

By: CA  Anil K. Jain ( Email: CAINDIA@HOTMAIL.COM )

Chartered Accountant | Economist | Policy Researcher | Author
President – Ahimsa Foundation India

Introduction

The evolution of cyber crime has closely followed the rapid development of information and communication technology. Computers, the Internet, smartphones, cloud computing, and artificial intelligence have revolutionised commerce, banking, governance, education, healthcare, and communication. However, these technological advances have also created new opportunities for criminals. Today, cyber crime is no longer confined to isolated incidents of hacking; it has become a sophisticated global threat involving organised criminal syndicates, terrorist groups, and even state-sponsored actors. Understanding the history of cyber crime helps explain how technological progress has continuously reshaped both criminal activities and cybersecurity measures.

The Early Years: Foundation of Computer Crime

The roots of cyber crime can be traced to the 1940s and 1950s, when computers were used almost exclusively by governments, military organisations, and research institutions. During this period, computers operated as isolated systems, and cyber crime in the modern sense did not exist. Nevertheless, some programmers occasionally gained unauthorised access to computer systems out of curiosity rather than criminal intent. The term "hacker" originally referred to highly skilled programmers who enjoyed exploring computer systems rather than committing crimes.

The 1970s marked the birth of computer crime. As mainframe computers became more widely used, incidents involving unauthorised access, software theft, data manipulation, and computer sabotage began to emerge. One of the earliest examples was "phone phreaking," where individuals manipulated telephone networks to make free long-distance calls, demonstrating how technology could be exploited for unlawful purposes.

The Rise of Modern Cyber Crime

The widespread adoption of personal computers during the 1980s significantly expanded opportunities for cyber crime. Software piracy, electronic fraud, computer viruses, and unauthorised network access became increasingly common. The Morris Worm of 1988 became one of the first major Internet security incidents, infecting thousands of computers and causing millions of dollars in losses. This incident also led to the establishment of the Computer Emergency Response Team (CERT), laying the foundation for organised cyber incident response.

The commercialisation of the Internet during the 1990s transformed cyber crime into a global phenomenon. Email fraud, password theft, website defacement, identity theft, and financial fraud became widespread. As online commerce expanded, criminals increasingly targeted banks, financial institutions, multinational corporations, and Internet users across the world.

Cyber Crime in the Twenty-First Century

In the modern era, cyber crime has become highly organised, financially motivated, and technologically sophisticated. Criminal organisations now employ ransomware, cryptocurrency laundering, supply-chain attacks, business email compromise (BEC), and artificial intelligence-enabled frauds. Cyber warfare has also emerged as an important component of geopolitical conflicts, with governments increasingly using cyber attacks for espionage and strategic purposes. The World Economic Forum now recognises cyber attacks as one of the world's most significant global risks.

Evolution of Cyber Crime in India

India's cyber crime landscape has evolved alongside its digital transformation. Before 1995, computer usage was largely confined to government departments, defence establishments, universities, and public sector organisations, resulting in relatively few cyber offences.

Following the introduction of commercial Internet services in 1995, incidents involving hacking, software piracy, and email fraud increased rapidly. To address the emerging legal challenges, Parliament enacted the Information Technology Act, 2000, providing India with a comprehensive legal framework for dealing with cyber offences.

Between 2000 and 2010, rapid growth in Internet banking, e-commerce, mobile communications, and e-governance led to a corresponding increase in phishing, identity theft, online cheating, credit card fraud, and data theft. The establishment of CERT-In in 2004 significantly strengthened India's cyber incident response capabilities.

The smartphone revolution from 2010 onwards accelerated digital adoption through initiatives such as Digital India, Aadhaar, BharatNet, and the Unified Payments Interface (UPI). While these programmes transformed India's digital economy, they also led to a sharp increase in UPI fraud, SIM swapping, fake loan applications, social media impersonation, investment scams, and mobile malware.

Since 2020, the COVID-19 pandemic has further accelerated digital dependence through remote working, online education, and cloud computing. Artificial intelligence has enabled criminals to launch deepfake scams, AI-generated phishing attacks, voice-cloning frauds, and sophisticated ransomware campaigns. India now records millions of cyber crime complaints every year through the National Cyber Crime Reporting Portal.

Landmark Cyber Attacks

Several cyber attacks have fundamentally shaped global cybersecurity.

The Morris Worm (1988) demonstrated the destructive potential of self-replicating malware. The Melissa Virus (1999) and the ILOVEYOU Worm (2000) exploited human behaviour through malicious email attachments, causing billions of dollars in worldwide losses.

The Estonia cyber attack (2007) showed how cyber attacks could disrupt an entire nation's banking systems, media organisations, and government services without the use of conventional military force. Stuxnet (2010) became the world's first recognised cyber weapon by causing physical damage to Iran's nuclear facilities.

The WannaCry ransomware attack (2017) infected more than 230,000 computers across over 150 countries, disrupting hospitals, businesses, universities, and government agencies. More recent attacks such as NotPetya, the SolarWinds supply-chain attack, the Colonial Pipeline ransomware attack, and AI-enabled deepfake frauds illustrate the rapidly evolving nature of cyber threats.

Major Cyber Incidents in India

India has also experienced several significant cyber attacks. The Cosmos Bank cyber fraud (2018) resulted in losses of nearly ₹94 crore through manipulation of payment systems. Malware detected at the Kudankulam Nuclear Power Plant (2019) highlighted the importance of protecting critical infrastructure.

The AIIMS Delhi ransomware attack (2022) disrupted healthcare services for several weeks, affecting patient care and hospital administration. Simultaneously, the explosive growth of UPI has been accompanied by increasing incidents of fake QR codes, screen-sharing scams, fraudulent payment links, and sophisticated social engineering attacks targeting digital payment users.

Future Trends

The future of cyber crime is expected to become even more complex. Artificial intelligence will automate phishing campaigns, malware generation, and deepfake creation. Quantum computing may weaken existing encryption systems, requiring the adoption of post-quantum cryptography.

The rapid expansion of the Internet of Things (IoT), cryptocurrency ecosystems, decentralised finance (DeFi), and Ransomware-as-a-Service (RaaS) will create new opportunities for cyber criminals. Critical infrastructure—including power grids, water supply systems, transportation, healthcare, and telecommunications—will remain prime targets for future cyber attacks.

Conclusion

The history of cyber crime mirrors the evolution of digital technology itself. What began as isolated acts of computer misuse has evolved into sophisticated transnational criminal enterprises and state-sponsored cyber warfare. For India, strengthening cybersecurity through effective legislation, advanced technology, skilled professionals, public awareness, and international cooperation is no longer optional—it is essential for protecting national security, economic development, and public trust in the digital economy.

 

Coming Soon