{"id":"https://openalex.org/W4416567530","doi":"https://doi.org/10.1093/cybsec/tyaf037","title":"Informal allies: State\u2013cybercriminal alignment in the ransomware ecosystem","display_name":"Informal allies: State\u2013cybercriminal alignment in the ransomware ecosystem","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416567530","doi":"https://doi.org/10.1093/cybsec/tyaf037"},"language":"en","primary_location":{"id":"doi:10.1093/cybsec/tyaf037","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaf037","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/11/1/tyaf037/65487415/tyaf037.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://academic.oup.com/cybersecurity/article-pdf/11/1/tyaf037/65487415/tyaf037.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064263421","display_name":"Karen Nershi","orcid":"https://orcid.org/0000-0002-0321-3111"},"institutions":[{"id":"https://openalex.org/I36943572","display_name":"Middlebury Institute of International Studies at Monterey","ror":"https://ror.org/05d1z6q04","country_code":"US","type":"education","lineage":["https://openalex.org/I36943572"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Karen Nershi","raw_affiliation_strings":["Threat Intelligence Program, Middlebury Institute of International Studies , Monterey, CA 94102 ,"],"raw_orcid":"https://orcid.org/0000-0002-0321-3111","affiliations":[{"raw_affiliation_string":"Threat Intelligence Program, Middlebury Institute of International Studies , Monterey, CA 94102 ,","institution_ids":["https://openalex.org/I36943572"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5064263421"],"corresponding_institution_ids":["https://openalex.org/I36943572"],"apc_list":{"value":1864,"currency":"USD","value_usd":1864},"apc_paid":{"value":1864,"currency":"USD","value_usd":1864},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.47724928,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"11","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.8593000173568726,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.8593000173568726,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12221","display_name":"Cybersecurity and Cyber Warfare Studies","score":0.040699999779462814,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11838","display_name":"Crime, Illicit Activities, and Governance","score":0.03139999881386757,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.8492000102996826},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6779000163078308},{"id":"https://openalex.org/keywords/extortion","display_name":"Extortion","score":0.6504999995231628},{"id":"https://openalex.org/keywords/geopolitics","display_name":"Geopolitics","score":0.5065000057220459},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4097999930381775},{"id":"https://openalex.org/keywords/cyberspace","display_name":"Cyberspace","score":0.32120001316070557}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.8492000102996826},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6779000163078308},{"id":"https://openalex.org/C2779066997","wikidata":"https://www.wikidata.org/wiki/Q6452087","display_name":"Extortion","level":2,"score":0.6504999995231628},{"id":"https://openalex.org/C201960208","wikidata":"https://www.wikidata.org/wiki/Q159385","display_name":"Geopolitics","level":3,"score":0.5065000057220459},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.499099999666214},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4950000047683716},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4097999930381775},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3601999878883362},{"id":"https://openalex.org/C2781241145","wikidata":"https://www.wikidata.org/wiki/Q204606","display_name":"Cyberspace","level":3,"score":0.32120001316070557},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.3199000060558319},{"id":"https://openalex.org/C46934059","wikidata":"https://www.wikidata.org/wiki/Q61515","display_name":"Outsourcing","level":2,"score":0.30550000071525574},{"id":"https://openalex.org/C3987366","wikidata":"https://www.wikidata.org/wiki/Q6658164","display_name":"Livelihood","level":3,"score":0.3052999973297119},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.27410000562667847},{"id":"https://openalex.org/C33199155","wikidata":"https://www.wikidata.org/wiki/Q2277143","display_name":"Sharing economy","level":2,"score":0.25209999084472656}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/cybsec/tyaf037","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaf037","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/11/1/tyaf037/65487415/tyaf037.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1093/cybsec/tyaf037","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaf037","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/11/1/tyaf037/65487415/tyaf037.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416567530.pdf","grobid_xml":"https://content.openalex.org/works/W4416567530.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W1576087156","https://openalex.org/W1972914161","https://openalex.org/W2008906551","https://openalex.org/W2062917721","https://openalex.org/W2110485449","https://openalex.org/W2156455942","https://openalex.org/W2165371879","https://openalex.org/W2417859339","https://openalex.org/W2537330718","https://openalex.org/W2551705448","https://openalex.org/W2602213083","https://openalex.org/W2623186831","https://openalex.org/W2767475871","https://openalex.org/W2806878268","https://openalex.org/W2891972588","https://openalex.org/W2922647595","https://openalex.org/W2942870997","https://openalex.org/W3036644138","https://openalex.org/W3128925487","https://openalex.org/W3165123796","https://openalex.org/W3166137653","https://openalex.org/W3209162062","https://openalex.org/W3213824428","https://openalex.org/W4200446854","https://openalex.org/W4224306505","https://openalex.org/W4244994263","https://openalex.org/W4247764957","https://openalex.org/W4250763933","https://openalex.org/W4297769544","https://openalex.org/W4313410038","https://openalex.org/W4391360174"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Cybercrime":[1],"frequently":[2],"crosses":[3],"national":[4],"borders,":[5],"as":[6,74],"perpetrators":[7],"and":[8,62,101],"victims":[9,38],"are":[10],"often":[11],"located":[12],"in":[13,24],"different":[14],"countries.":[15],"This":[16],"paper":[17],"asks:":[18],"what":[19],"role":[20],"do":[21],"states":[22,135],"play":[23],"shaping":[25],"cybercriminal":[26,46,95],"activity?":[27],"Drawing":[28],"on":[29,107],"an":[30,79,116],"original":[31],"dataset":[32],"of":[33,77,82,133],"4194":[34],"double":[35],"extortion":[36],"ransomware":[37,121],"collected":[39],"from":[40,66,92,124],"dark":[41],"web":[42],"sources,":[43],"I":[44,53,84,110],"identify":[45],"activity":[47],"aligned":[48],"with":[49,103,120],"Russian":[50],"state":[51],"interests.":[52],"find":[54],"Russia-based":[55],"groups":[56,122],"increased":[57,80],"attacks":[58],"before":[59],"Western":[60],"elections,":[61],"companies":[63],"that":[64,112],"withdrew":[65],"Russia":[67],"after":[68],"the":[69,104,113],"invasion\u2014an":[70],"action":[71],"widely":[72],"perceived":[73],"a":[75,93,128],"condemnation":[76],"Russia\u2014faced":[78],"risk":[81],"attack.":[83],"also":[85],"analysed":[86],"over":[87],"60":[88],"000":[89],"leaked":[90],"messages":[91],"major":[94],"group,":[96],"which":[97],"reveals":[98],"information":[99],"sharing":[100],"cooperation":[102],"Kremlin.":[105],"Based":[106],"these":[108],"analyses,":[109],"argue":[111],"Kremlin":[114],"maintains":[115],"informal":[117],"cooperative":[118],"relationship":[119],"operating":[123],"its":[125],"territory,":[126],"advancing":[127],"more":[129],"nuanced":[130],"theoretical":[131],"understanding":[132],"how":[134],"can":[136],"leverage":[137],"cybercriminals":[138],"for":[139],"geopolitical":[140],"ends.":[141]},"counts_by_year":[],"updated_date":"2026-03-09T07:00:12.390032","created_date":"2025-11-25T00:00:00"}