Data is a company’s most valuable asset. So, doing everything in your power to protect that asset is a given. But what if the threat you’re guarding your data against is known to cripple operations, tarnish reputations, and drain finances? And even worse, what if that threat is only getting more dangerous, thanks to a little thing called artificial intelligence (AI)?
Unfortunately, for many businesses, there’s nothing “what if” about this scenario. As many as 72% of businesses worldwide have experienced a ransomware attack at some point and know just how devastating the aftermath can be.
That’s why we tapped two cybersecurity experts to share their insights on ransomware, its evolution, and how businesses can protect themselves. Read on to hear what Tom Vazdar, the chair of the Enterprise Cybersecurity Master’s program at the Open Institute of Technology (OPIT), and Venicia Solomons, a seasoned cybersecurity architect, have to say on this topic in their “Cyber Threat Landscape 2024: Navigating New Risks” master class.
Ransomware: The Basics
Ransomware is nothing new. However, there are always new business owners who (luckily) haven’t encountered it yet. So, let’s cover the basics first.
Ransomware is a natural product of phishing, a human-centric cyber threat that relies on social engineering to deceive individuals into providing sensitive information or downloading malicious attachments. The latter is what ultimately triggers a ransomware infection. Tom describes the process like this:
You click on a malicious link.
Your device downloads the malware.
Your system is now infected, and somebody else is essentially in charge.
They encrypt your data and demand you pay ransom for the encryption key to get it back.
As mentioned, dealing with ransomware attacks and cyber criminals has become a daily reality for companies worldwide. What certainly doesn’t help companies is the fact that ransomware is now also offered as a service.
Ransomware as a Service
Just a few short years ago, cybercriminals needed sophisticated technical skills and tools to develop and deploy ransomware. Now, all they need is access to the dark web.
As Tom explains it, numerous cyber criminals on the dark web offer ransomware as a service, a malicious adaptation of the software as a service (SaaS) business model. So, you essentially pay them to deploy their ransomware on your behalf.
The most famous, or should we say infamous, among these threats is the LockBit model, which has wreaked havoc on thousands of companies worldwide. The issue is that LockBit ransomware attacks vary in tactics, techniques, and procedures. In other words, an organization must be prepared for virtually anything.
How Has AI Affected Ransomware?
Ransomware is dangerous on its own. But throw artificial intelligence into the mix, and you’ve got a massive threat on your hands.
AI has undoubtedly revolutionized the cybersecurity industry, for better or for worse. The “worse” part is that AI is making cyber threats smarter. Unfortunately, for organizations, this particularly applies to ransomware. According to a 2024 report by the U.K.’s top intelligence agency, ransomware stands to gain the most from AI.
How so?
Well, AI has the potential to create malware that circumvents current cybersecurity detection measures. After all, AI is trained using data. Give it malware data to analyze, and it will learn how to evade detection by traditional cybersecurity tools.
AI will also likely generate a surge of new cybercriminals as the barrier to entering into cybercrime decreases with AI-powered tools.
Of course, the more capable and experienced attackers will also benefit from AI. They will use it to identify system vulnerabilities, bypass security defenses, and craft more precise social engineering attacks.
How to Prevent Ransomware Attacks
Given how quickly ransomware is evolving, preventing attacks requires a multi-faceted approach that combines technology, education, and proactive measures. Tom and Venicia break down this approach.
1. Keep Your Systems Updated
When it comes to anything cybersecurity-related, this is the first crucial step. Keep all your systems and programs updated and patched if you want to stand any chance of protecting against known vulnerabilities.
Tom says that there’s a new vulnerability “basically each week,” so having a process in place to update regularly and patch systems is essential.
Venicia adds that something as simple as a basic software update can go a long way toward protecting your data from ransomware. This update will limit its ability to spread through your network, thus reducing the impact of the attack.
2. Invest in Quality Training
Having the most advanced protection systems in place will do you no good if you don’t have well-trained employees.
These employees must learn to recognize potential cyberattacks that could introduce malware into your organization’s system (e.g., phishing emails). Of course, the next step is to respond effectively to the attack. Though each organization has its own set of rules in place, the proper response typically involves disconnecting from the network and contacting IT support.
3. Implement Defensive Systems
Humans are undoubtedly the first line of defense against cyber threats. However, they can’t do it alone. That’s why implementing advanced Endpoint Detection and Response (EDR) solutions is crucial. Tom explains that these systems will help you identify and, more importantly, mitigate a threat on time.
However, he also adds that you must restrict user permissions within the system. This way, even if a single component is compromised, the ransomware won’t take down the entire network.
4. Implement Network Segmentation
As you can see, a huge part of mitigating ransomware attacks is ensuring they don’t affect the entire network. That’s where network segmentation can also help.
As Tom explains, with network segmentation, the malicious actor in control of your network won’t be able to do “lateral movements.” In other words, even if they do manage to penetrate your network, they won’t be able to spread within it.
So, network segmentation is a critical part of the multi-layer approach every organization should adopt when it comes to cybersecurity.
5. Collaborate With Others
Remember – you aren’t the only one experiencing cyberattacks. In Venicia’s words, “ransomware has a global impact.”
That’s why organizations in the private sector are constantly encouraged to “talk to each other,” as Tom puts it. Of course, there’s always the issue of confidentiality, but Tom explains that this, too, can be resolved with a “closed circle of trust.”
Also, organizations in the private and public sectors are encouraged to share relevant information with institutions such as the Financial Services Information Sharing and Analysis Center (FS-ISAC).
In Europe, there’s also something called The No More Ransom Project. This Europol initiative has existed for years, hosting decryption keys for different types of ransomware. It has helped numerous individuals and organizations decrypt their systems and avoid paying the ransom.
Of course, this won’t always be possible, as the attackers typically keep changing the encryption keys. However, anything that helps organizations avoid paying the ransom is worth trying.
Why?
Because paying the ransom often won’t solve any problems.
As Tom explains it, you’re dealing with criminals, after all. So, they will often double the ransom after you pay the initial amount, having realized that you have the money. Or, they’ll simply take the money and run without giving you the decryption keys.
So, ongoing threat intelligence sharing should be among the top priorities for an organization, as it allows them to evade the last-resort scenario of paying the ransom.
6. Invest in Backups and Disaster Recovery
According to Venicia, backups and disaster recovery have a massive role to play in combating ransomware. She says that the primary reason organizations choose to pay the ransom is because they don’t have any backups in place. In other words, they don’t have an alternative way to get their data back.
That’s precisely what Tom has experienced working with many small and medium-sized businesses.
He says that these businesses usually don’t have disaster recovery procedures and data backups because they find them to be too expensive. Other times, they’ll say they didn’t have the time to deal with these measures. But whatever the excuse may be, one thing’s for sure – having no backups leaves you vulnerable to losing your data permanently in a ransomware attack.
According to Tom and Venicia, here’s what an ideal proactive approach to cybersecurity would look like.
Step No. 1 – Have regularly scheduled backups and ensure they’re stored in different environments, including offline ones. Tom suggests the 3-2-1 data backup strategy – have three copies of your data on two different mediums (e.g., hard drives and DVDs) with one copy off-site (a different physical location).
Step No. 2 – Regularly test your backups to see whether they’re able to handle different scenarios.
Step No. 3 – Implement a disaster recovery plan that outlines the steps for different types of incidents. Of course, these incidents shouldn’t only cover ransomware. Earthquakes, floods, and even meteor strikes should be considered in your plan. The last part might seem silly to you. In fact, it also sounded silly to Tom and his colleagues. That is, at least, until a meteor struck Russia in 2013. So, you never know!
The Importance of Cybersecurity Specialists
Most of the strategies for combating ransomware require one thing – a skilled cybersecurity specialist to execute them. This is also what most companies lack, which is why they easily fall victim to cyberattacks.
That’s why programs like the Enterprise Cybersecurity Master’s program at OPIT are essential for the future of cybersecurity. This program helps train the next generation of cybersecurity professionals to defend organizations against the so-called “Ransomware Armageddon” and any other cyber threat that might emerge.
-
From the same author
Read the articleThe world is rapidly changing. New technologies such as artificial intelligence (AI) are transforming our lives and work, redefining the definition of “essential office skills.”
So what essential skills do today’s workers need to thrive in a business world undergoing a major digital transformation? It’s a question that Alan Lerner, director at Toptal and lecturer at the Open Institute of Technology (OPIT), addressed in his recent online masterclass.
In a broad overview of the new office landscape, Lerner shares the essential skills leaders need to manage – including artificial intelligence – to keep abreast of trends.
Here are eight essential capabilities business leaders in the AI era need, according to Lerner, which he also detailed in OPIT’s recent Master’s in Digital Business and Innovation webinar.
An Adapting Professional Environment
Lerner started his discussion by quoting naturalist Charles Darwin.
“It is not the strongest of the species that survives, nor the most intelligent that survives. It is the one that is the most adaptable to change.”
The quote serves to highlight the level of change that we are currently seeing in the professional world, said Lerner.
According to the World Economic Forum’s The Future of Jobs Report 2025, over the next five years 22% of the labor market will be affected by structural change – including job creation and destruction – and much of that change will be enabled by new technologies such as AI and robotics. They expect the displacement of 92 million existing jobs and the creation of 170 million new jobs by 2030.
While there will be significant growth in frontline jobs – such as delivery drivers, construction workers, and care workers – the fastest-growing jobs will be tech-related roles, including big data specialists, FinTech engineers, and AI and machine learning specialists, while the greatest decline will be in clerical and secretarial roles. The report also predicts that most workers can anticipate that 39% of their existing skill set will be transformed or outdated in five years.
Lerner also highlighted key findings in the Accenture Life Trends 2025 Report, which explores behaviors and attitudes related to business, technology, and social shifts. The report noted five key trends:
- Cost of Hesitation – People are becoming more wary of the information they receive online.
- The Parent Trap – Parents and governments are increasingly concerned with helping the younger generation shape a safe relationship with digital technology.
- Impatience Economy – People are looking for quick solutions over traditional methods to achieve their health and financial goals.
- The Dignity of Work – Employees desire to feel inspired, to be entrusted with agency, and to achieve a work-life balance.
- Social Rewilding – People seek to disconnect and focus on satisfying activities and meaningful interactions.
These are consumer and employee demands representing opportunities for change in the modern business landscape.
Key Capabilities for the AI Era
Businesses are using a variety of strategies to adapt, though not always strategically. According to McClean & Company’s HR Trends Report 2025, 42% of respondents said they are currently implementing AI solutions, but only 7% have a documented AI implementation strategy.
This approach reflects the newness of the technology, with many still unsure of the best way to leverage AI, but also feeling the pressure to adopt and adapt, experiment, and fail forward.
So, what skills do leaders need to lead in an environment with both transformation and uncertainty? Lerner highlighted eight essential capabilities, independent of technology.
Capability 1: Manage Complexity
Leaders need to be able to solve problems and make decisions under fast-changing conditions. This requires:
- Being able to look at and understand organizations as complex social-technical systems
- Keeping a continuous eye on change and adopting an “outside-in” vision of their organization
- Moving fast and fixing things faster
- Embracing digital literacy and technological capabilities
Capability 2: Leverage Networks
Leaders need to develop networks systematically to achieve organizational goals because it is no longer possible to work within silos. Leaders should:
- Use networks to gain insights into complex problems
- Create networks to enhance influence
- Treat networks as mutually rewarding relationships
- Develop a robust profile that can be adapted for different networks
Capability 3: Think and Act “Global”
Leaders should benchmark using global best practices but adapt them to local challenges and the needs of their organization. This requires:
- Identifying what great companies are achieving and seeking data to understand underlying patterns
- Developing perspectives to craft global strategies that incorporate regional and local tactics
- Learning how to navigate culturally complex and nuanced business solutions
Capability 4: Inspire Engagement
Leaders must foster a culture that creates meaningful connections between employees and organizational values. This means:
- Understanding individual values and needs
- Shaping projects and assignments to meet different values and needs
- Fostering an inclusive work environment with plenty of psychological safety
- Developing meaningful conversations and both providing and receiving feedback
- Sharing advice and asking for help when needed
Capability 5: Communicate Strategically
Leaders should develop crisp, clear messaging adaptable to various audiences and focus on active listening. Achieving this involves:
- Creating their communication style and finding their unique voice
- Developing storytelling skills
- Utilizing a data-centric and fact-based approach to communication
- Continual practice and asking for feedback
Capability 6: Foster Innovation
Leaders should collaborate with experts to build a reliable innovation process and a creative environment where new ideas thrive. Essential steps include:
- Developing or enhancing structures that best support innovation
- Documenting and refreshing innovation systems, processes, and practices
- Encouraging people to discover new ways of working
- Aiming to think outside the box and develop a growth mindset
- Trying to be as “tech-savvy” as possible
Capability 7: Cultivate Learning Agility
Leaders should always seek out and learn new things and not be afraid to ask questions. This involves:
- Adopting a lifelong learning mindset
- Seeking opportunities to discover new approaches and skills
- Enhancing problem-solving skills
- Reviewing both successful and unsuccessful case studies
Capability 8: Develop Personal Adaptability
Leaders should be focused on being effective when facing uncertainty and adapting to change with vigor. Therefore, leaders should:
- Be flexible about their approach to facing challenging situations
- Build resilience by effectively managing stress, time, and energy
- Recognize when past approaches do not work in current situations
- Learn from and capitalize on mistakes
Curiosity and Adaptability
With the eight key capabilities in mind, Lerner suggests that curiosity and adaptability are the key skills that everyone needs to thrive in the current environment.
He also advocates for lifelong learning and teaches several key courses at OPIT which can lead to a Bachelor’s Degree in Digital Business.
Read the articleMany people treat cyber threats and digital fraud as a new phenomenon that only appeared with the development of the internet. But fraud – intentional deceit to manipulate a victim – has always existed; it is just the tools that have changed.
In a recent online course for the Open Institute of Technology (OPIT), AI & Cybersecurity Strategist Tom Vazdar, chair of OPIT’s Master’s Degree in Enterprise Cybersecurity, demonstrated the striking parallels between some of the famous fraud cases of the 18th century and modern cyber fraud.
Why does the history of fraud matter?
Primarily because the psychology and fraud tactics have remained consistent over the centuries. While cybersecurity is a tool that can combat modern digital fraud threats, no defense strategy will be successful without addressing the underlying psychology and tactics.
These historical fraud cases Vazdar addresses offer valuable lessons for current and future cybersecurity approaches.
The South Sea Bubble (1720)
The South Sea Bubble was one of the first stock market crashes in history. While it may not have had the same far-reaching consequences as the Black Thursday crash of 1929 or the 2008 crash, it shows how fraud can lead to stock market bubbles and advantages for insider traders.
The South Sea Company was a British company that emerged to monopolize trade with the Spanish colonies in South America. The company promised investors significant returns but provided no evidence of its activities. This saw the stock prices grow from £100 to £1,000 in a matter of months, then crash when the company’s weakness was revealed.
Many people lost a significant amount of money, including Sir Isaac Newton, prompting the statement, “I can calculate the movement of the stars, but not the madness of men.“
Investors often have no way to verify a company’s claim, making stock markets a fertile ground for manipulation and fraud since their inception. When one party has more information than another, it creates the opportunity for fraud. This can be seen today in Ponzi schemes, tech stock bubbles driven by manipulative media coverage, and initial cryptocurrency offerings.
The Diamond Necklace Affair (1784-1785)
The Diamond Necklace Affair is an infamous incident of fraud linked to the French Revolution. An early example of identity theft, it also demonstrates that the harm caused by such a crime can go far beyond financial.
A French aristocrat named Jeanne de la Mont convinced Cardinal Louis-René-Édouard, Prince de Rohan into thinking that he was buying a valuable diamond necklace on behalf of Queen Marie Antoinette. De la Mont forged letters from the queen and even had someone impersonate her for a meeting, all while convincing the cardinal of the need for secrecy. The cardinal overlooked several questionable issues because he believed he would gain political benefit from the transaction.
When the scheme finally exposed, it damaged Marie Antoinette’s reputation, despite her lack of involvement in the deception. The story reinforced the public perception of her as a frivolous aristocrat living off the labor of the people. This contributed to the overall resentment of the aristocracy that erupted in the French Revolution and likely played a role in Marie Antoinette’s death. Had she not been seen as frivolous, she might have been allowed to live after her husband’s death.
Today, impersonation scams work in similar ways. For example, a fraudster might forge communication from a CEO to convince employees to release funds or take some other action. The risk of this is only increasing with improved technology such as deepfakes.
Spanish Prisoner Scam (Late 1700s)
The Spanish Prisoner Scam will probably sound very familiar to anyone who received a “Nigerian prince” email in the early 2000s.
Victims received letters from a “wealthy Spanish prisoner” who needed their help to access his fortune. If they sent money to facilitate his escape and travel, he would reward them with greater riches when he regained his fortune. This was only one of many similar scams in the 1700s, often involving follow-up requests for additional payments before the scammer disappeared.
While the “Nigerian prince” scam received enough publicity that it became almost unbelievable that people could fall for it, if done well, these can be psychologically sophisticated scams. The stories play on people’s emotions, get them invested in the person, and enamor them with the idea of being someone helpful and important. A compelling narrative can diminish someone’s critical thinking and cause them to ignore red flags.
Today, these scams are more likely to take the form of inheritance fraud or a lottery scam, where, again, a person has to pay an advance fee to unlock a much bigger reward, playing on the common desire for easy money.
Evolution of Fraud
These examples make it clear that fraud is nothing new and that effective tactics have thrived over the centuries. Technology simply opens up new opportunities for fraud.
While 18th-century scammers had to rely on face-to-face contact and fraudulent letters, in the 19th century they could leverage the telegraph for “urgent” communication and newspaper ads to reach broader audiences. In the 20th century, there were telephones and television ads. Today, there are email, social media, and deepfakes, with new technologies emerging daily.
Rather than quack doctors offering miracle cures, we see online health scams selling diet pills and antiaging products. Rather than impersonating real people, we see fake social media accounts and catfishing. Fraudulent sites convince people to enter their bank details rather than asking them to send money. The anonymity of the digital world protects perpetrators.
But despite the technology changing, the underlying psychology that makes scams successful remains the same:
- Greed and the desire for easy money
- Fear of missing out and the belief that a response is urgent
- Social pressure to “keep up with the Joneses” and the “Bandwagon Effect”
- Trust in authority without verification
Therefore, the best protection against scams remains the same: critical thinking and skepticism, not technology.
Responding to Fraud
In conclusion, Vazdar shared a series of steps that people should take to protect themselves against fraud:
- Think before you click.
- Beware of secrecy and urgency.
- Verify identities.
- If it seems too good to be true, be skeptical.
- Use available security tools.
Those security tools have changed over time and will continue to change, but the underlying steps for identifying and preventing fraud remain the same.
For more insights from Vazdar and other experts in the field, consider enrolling in highly specialized and comprehensive programs like OPIT’s Enterprise Security Master’s program.
-
Go to all authors
Related posts
The world is rapidly changing. New technologies such as artificial intelligence (AI) are transforming our lives and work, redefining the definition of “essential office skills.”
So what essential skills do today’s workers need to thrive in a business world undergoing a major digital transformation? It’s a question that Alan Lerner, director at Toptal and lecturer at the Open Institute of Technology (OPIT), addressed in his recent online masterclass.
In a broad overview of the new office landscape, Lerner shares the essential skills leaders need to manage – including artificial intelligence – to keep abreast of trends.
Here are eight essential capabilities business leaders in the AI era need, according to Lerner, which he also detailed in OPIT’s recent Master’s in Digital Business and Innovation webinar.
An Adapting Professional Environment
Lerner started his discussion by quoting naturalist Charles Darwin.
“It is not the strongest of the species that survives, nor the most intelligent that survives. It is the one that is the most adaptable to change.”
The quote serves to highlight the level of change that we are currently seeing in the professional world, said Lerner.
According to the World Economic Forum’s The Future of Jobs Report 2025, over the next five years 22% of the labor market will be affected by structural change – including job creation and destruction – and much of that change will be enabled by new technologies such as AI and robotics. They expect the displacement of 92 million existing jobs and the creation of 170 million new jobs by 2030.
While there will be significant growth in frontline jobs – such as delivery drivers, construction workers, and care workers – the fastest-growing jobs will be tech-related roles, including big data specialists, FinTech engineers, and AI and machine learning specialists, while the greatest decline will be in clerical and secretarial roles. The report also predicts that most workers can anticipate that 39% of their existing skill set will be transformed or outdated in five years.
Lerner also highlighted key findings in the Accenture Life Trends 2025 Report, which explores behaviors and attitudes related to business, technology, and social shifts. The report noted five key trends:
- Cost of Hesitation – People are becoming more wary of the information they receive online.
- The Parent Trap – Parents and governments are increasingly concerned with helping the younger generation shape a safe relationship with digital technology.
- Impatience Economy – People are looking for quick solutions over traditional methods to achieve their health and financial goals.
- The Dignity of Work – Employees desire to feel inspired, to be entrusted with agency, and to achieve a work-life balance.
- Social Rewilding – People seek to disconnect and focus on satisfying activities and meaningful interactions.
These are consumer and employee demands representing opportunities for change in the modern business landscape.
Key Capabilities for the AI Era
Businesses are using a variety of strategies to adapt, though not always strategically. According to McClean & Company’s HR Trends Report 2025, 42% of respondents said they are currently implementing AI solutions, but only 7% have a documented AI implementation strategy.
This approach reflects the newness of the technology, with many still unsure of the best way to leverage AI, but also feeling the pressure to adopt and adapt, experiment, and fail forward.
So, what skills do leaders need to lead in an environment with both transformation and uncertainty? Lerner highlighted eight essential capabilities, independent of technology.
Capability 1: Manage Complexity
Leaders need to be able to solve problems and make decisions under fast-changing conditions. This requires:
- Being able to look at and understand organizations as complex social-technical systems
- Keeping a continuous eye on change and adopting an “outside-in” vision of their organization
- Moving fast and fixing things faster
- Embracing digital literacy and technological capabilities
Capability 2: Leverage Networks
Leaders need to develop networks systematically to achieve organizational goals because it is no longer possible to work within silos. Leaders should:
- Use networks to gain insights into complex problems
- Create networks to enhance influence
- Treat networks as mutually rewarding relationships
- Develop a robust profile that can be adapted for different networks
Capability 3: Think and Act “Global”
Leaders should benchmark using global best practices but adapt them to local challenges and the needs of their organization. This requires:
- Identifying what great companies are achieving and seeking data to understand underlying patterns
- Developing perspectives to craft global strategies that incorporate regional and local tactics
- Learning how to navigate culturally complex and nuanced business solutions
Capability 4: Inspire Engagement
Leaders must foster a culture that creates meaningful connections between employees and organizational values. This means:
- Understanding individual values and needs
- Shaping projects and assignments to meet different values and needs
- Fostering an inclusive work environment with plenty of psychological safety
- Developing meaningful conversations and both providing and receiving feedback
- Sharing advice and asking for help when needed
Capability 5: Communicate Strategically
Leaders should develop crisp, clear messaging adaptable to various audiences and focus on active listening. Achieving this involves:
- Creating their communication style and finding their unique voice
- Developing storytelling skills
- Utilizing a data-centric and fact-based approach to communication
- Continual practice and asking for feedback
Capability 6: Foster Innovation
Leaders should collaborate with experts to build a reliable innovation process and a creative environment where new ideas thrive. Essential steps include:
- Developing or enhancing structures that best support innovation
- Documenting and refreshing innovation systems, processes, and practices
- Encouraging people to discover new ways of working
- Aiming to think outside the box and develop a growth mindset
- Trying to be as “tech-savvy” as possible
Capability 7: Cultivate Learning Agility
Leaders should always seek out and learn new things and not be afraid to ask questions. This involves:
- Adopting a lifelong learning mindset
- Seeking opportunities to discover new approaches and skills
- Enhancing problem-solving skills
- Reviewing both successful and unsuccessful case studies
Capability 8: Develop Personal Adaptability
Leaders should be focused on being effective when facing uncertainty and adapting to change with vigor. Therefore, leaders should:
- Be flexible about their approach to facing challenging situations
- Build resilience by effectively managing stress, time, and energy
- Recognize when past approaches do not work in current situations
- Learn from and capitalize on mistakes
Curiosity and Adaptability
With the eight key capabilities in mind, Lerner suggests that curiosity and adaptability are the key skills that everyone needs to thrive in the current environment.
He also advocates for lifelong learning and teaches several key courses at OPIT which can lead to a Bachelor’s Degree in Digital Business.
Many people treat cyber threats and digital fraud as a new phenomenon that only appeared with the development of the internet. But fraud – intentional deceit to manipulate a victim – has always existed; it is just the tools that have changed.
In a recent online course for the Open Institute of Technology (OPIT), AI & Cybersecurity Strategist Tom Vazdar, chair of OPIT’s Master’s Degree in Enterprise Cybersecurity, demonstrated the striking parallels between some of the famous fraud cases of the 18th century and modern cyber fraud.
Why does the history of fraud matter?
Primarily because the psychology and fraud tactics have remained consistent over the centuries. While cybersecurity is a tool that can combat modern digital fraud threats, no defense strategy will be successful without addressing the underlying psychology and tactics.
These historical fraud cases Vazdar addresses offer valuable lessons for current and future cybersecurity approaches.
The South Sea Bubble (1720)
The South Sea Bubble was one of the first stock market crashes in history. While it may not have had the same far-reaching consequences as the Black Thursday crash of 1929 or the 2008 crash, it shows how fraud can lead to stock market bubbles and advantages for insider traders.
The South Sea Company was a British company that emerged to monopolize trade with the Spanish colonies in South America. The company promised investors significant returns but provided no evidence of its activities. This saw the stock prices grow from £100 to £1,000 in a matter of months, then crash when the company’s weakness was revealed.
Many people lost a significant amount of money, including Sir Isaac Newton, prompting the statement, “I can calculate the movement of the stars, but not the madness of men.“
Investors often have no way to verify a company’s claim, making stock markets a fertile ground for manipulation and fraud since their inception. When one party has more information than another, it creates the opportunity for fraud. This can be seen today in Ponzi schemes, tech stock bubbles driven by manipulative media coverage, and initial cryptocurrency offerings.
The Diamond Necklace Affair (1784-1785)
The Diamond Necklace Affair is an infamous incident of fraud linked to the French Revolution. An early example of identity theft, it also demonstrates that the harm caused by such a crime can go far beyond financial.
A French aristocrat named Jeanne de la Mont convinced Cardinal Louis-René-Édouard, Prince de Rohan into thinking that he was buying a valuable diamond necklace on behalf of Queen Marie Antoinette. De la Mont forged letters from the queen and even had someone impersonate her for a meeting, all while convincing the cardinal of the need for secrecy. The cardinal overlooked several questionable issues because he believed he would gain political benefit from the transaction.
When the scheme finally exposed, it damaged Marie Antoinette’s reputation, despite her lack of involvement in the deception. The story reinforced the public perception of her as a frivolous aristocrat living off the labor of the people. This contributed to the overall resentment of the aristocracy that erupted in the French Revolution and likely played a role in Marie Antoinette’s death. Had she not been seen as frivolous, she might have been allowed to live after her husband’s death.
Today, impersonation scams work in similar ways. For example, a fraudster might forge communication from a CEO to convince employees to release funds or take some other action. The risk of this is only increasing with improved technology such as deepfakes.
Spanish Prisoner Scam (Late 1700s)
The Spanish Prisoner Scam will probably sound very familiar to anyone who received a “Nigerian prince” email in the early 2000s.
Victims received letters from a “wealthy Spanish prisoner” who needed their help to access his fortune. If they sent money to facilitate his escape and travel, he would reward them with greater riches when he regained his fortune. This was only one of many similar scams in the 1700s, often involving follow-up requests for additional payments before the scammer disappeared.
While the “Nigerian prince” scam received enough publicity that it became almost unbelievable that people could fall for it, if done well, these can be psychologically sophisticated scams. The stories play on people’s emotions, get them invested in the person, and enamor them with the idea of being someone helpful and important. A compelling narrative can diminish someone’s critical thinking and cause them to ignore red flags.
Today, these scams are more likely to take the form of inheritance fraud or a lottery scam, where, again, a person has to pay an advance fee to unlock a much bigger reward, playing on the common desire for easy money.
Evolution of Fraud
These examples make it clear that fraud is nothing new and that effective tactics have thrived over the centuries. Technology simply opens up new opportunities for fraud.
While 18th-century scammers had to rely on face-to-face contact and fraudulent letters, in the 19th century they could leverage the telegraph for “urgent” communication and newspaper ads to reach broader audiences. In the 20th century, there were telephones and television ads. Today, there are email, social media, and deepfakes, with new technologies emerging daily.
Rather than quack doctors offering miracle cures, we see online health scams selling diet pills and antiaging products. Rather than impersonating real people, we see fake social media accounts and catfishing. Fraudulent sites convince people to enter their bank details rather than asking them to send money. The anonymity of the digital world protects perpetrators.
But despite the technology changing, the underlying psychology that makes scams successful remains the same:
- Greed and the desire for easy money
- Fear of missing out and the belief that a response is urgent
- Social pressure to “keep up with the Joneses” and the “Bandwagon Effect”
- Trust in authority without verification
Therefore, the best protection against scams remains the same: critical thinking and skepticism, not technology.
Responding to Fraud
In conclusion, Vazdar shared a series of steps that people should take to protect themselves against fraud:
- Think before you click.
- Beware of secrecy and urgency.
- Verify identities.
- If it seems too good to be true, be skeptical.
- Use available security tools.
Those security tools have changed over time and will continue to change, but the underlying steps for identifying and preventing fraud remain the same.
For more insights from Vazdar and other experts in the field, consider enrolling in highly specialized and comprehensive programs like OPIT’s Enterprise Security Master’s program.
Have questions?
Visit our FAQ page or get in touch with us!
Write us at +39 335 576 0263
Get in touch at hello@opit.com
Talk to one of our Study Advisors
We are international
We can speak in:
