Cyber Crimes Meaning Classification and Types

Cyber crime is any unlawful act where a computer or electronic device is used as a tool, target, or both. It is not defined in the IT Act 2000 or BNS 2023 but is a collective term for offences involving computer systems and networks.

Legal Framework

Classification of Cyber Crimes

By Target

By Nature of Offence

Types of Cyber Crimes (Detailed)

Cyber Crime Classification Flow

%%{init: {"theme": "base", "themeVariables": {"primaryColor": "#fef9c3", "primaryBorderColor": "#1a1a1a", "primaryTextColor": "#1a1a1a", "secondaryColor": "#fde047", "secondaryBorderColor": "#1a1a1a", "lineColor": "#1a1a1a", "textColor": "#1a1a1a", "fontSize": "14px", "fontFamily": "Space Grotesk, DM Sans, system-ui, sans-serif", "nodeBorder": "2px", "mainBkg": "#fef9c3", "edgeLabelBackground": "#FFFDF7"}}}%%
flowchart TD
    A(["fa:fa-exclamation-triangle Cyber Crime Committed"]):::start --> B{"fa:fa-question Computer as?"}:::decision
    B -->|Tool| C["fa:fa-users Against Persons"]:::process
    B -->|Target| D["fa:fa-building Against Systems"]:::process
    B -->|Incidental| E["fa:fa-globe Against Society/State"]:::process
    C --> C1["Identity Theft S.66C"]:::document
    C --> C2["Cyber Stalking S.354D BNS"]:::document
    C --> C3["Defamation S.356 BNS"]:::document
    D --> D1["Hacking S.66"]:::document
    D --> D2["DoS Attack S.43(e)"]:::document
    D --> D3["Virus S.43(c)"]:::document
    E --> E1["Cyber Terrorism S.66F"]:::document
    E --> E2["Child Porn S.67B"]:::document
    E --> E3["Online Radicalization"]:::document

    classDef start fill:#d1fae5,stroke:#1a1a1a,stroke-width:2px,color:#1a1a1a
    classDef process fill:#fef9c3,stroke:#1a1a1a,stroke-width:2px,color:#1a1a1a
    classDef decision fill:#fde047,stroke:#1a1a1a,stroke-width:2px,color:#1a1a1a
    classDef document fill:#dbeafe,stroke:#1a1a1a,stroke-width:2px,color:#1a1a1a

Recall Check

1. Why is "cyber crime" not formally defined in the IT Act 2000?
2. Name three crimes where the computer is used as a "tool" and three where it is the "target."
3. What is the punishment for identity theft under S.66C?

Key Cases

SMC Pneumatics (India) v. Jogesh Kwatra (2004) SMC-Pneumatics-v-Jogesh-Kwatra-2004 Issue: Whether sending defamatory emails about a company's managing director constitutes cyber defamation actionable at law. Rule: Defamation through electronic medium (email, social media) is actionable under tort law and IT Act; courts can grant injunction. Held: Delhi HC granted injunction restraining defendant from sending defamatory emails. Recognized cyber defamation as a distinct actionable wrong.

State of Tamil Nadu v. Suhas Katti (2004) State-of-Tamil-Nadu-v-Suhas-Katti-2004 Issue: Whether posting obscene and defamatory messages about a woman on an internet group constitutes offence under IT Act. Rule: Posting obscene material in electronic form violates S.67 IT Act; posting defamatory content violates IPC S.500 (now BNS S.356). Held: First Indian conviction under IT Act. Accused convicted under S.67 IT Act and S.469/509 IPC (now corresponding BNS sections). Sentenced to rigorous imprisonment.

Distinctions

Flashcards

Q: Is "cyber crime" defined in the IT Act? A: No. It is not defined in IT Act 2000, IT Amendment Act 2008, or any other Indian legislation. It is a collective term used for technology-related offences.

Q: What is the punishment for hacking under S.66 IT Act? A: Imprisonment up to 3 years or fine up to Rs.5 lakhs or both.

Q: What is identity theft under S.66C? A: Fraudulently or dishonestly using the electronic signature, password, or any other unique identification feature of another person. Punishment: 3 years + Rs.1 lakh fine.

Q: What was the first conviction under the IT Act in India? A: State of Tamil Nadu v. Suhas Katti (2004): conviction under S.67 for posting obscene content about a woman on an internet group.

Q: What is a Denial of Service (DoS) attack? A: Overwhelming a computer system/network with traffic or requests to make it unavailable to legitimate users. Covered under S.43(e) + S.66 IT Act.

Q: Name three types of hackers. A: White hat (ethical/authorized), Black hat (malicious/unauthorized), Grey hat (unauthorized but without malicious intent, may disclose vulnerabilities).

Q: What is phishing? A: Fraudulent attempt to obtain sensitive information (passwords, card details) by impersonating a trustworthy entity via email, SMS, or fake website. Covered under S.66D IT Act (cheating by personation using computer resource).

Q: What is the difference between S.43 and S.66 IT Act? A: S.43 provides civil compensation (up to Rs.5 crore) for damage to computer systems. S.66 makes the same acts criminal if done dishonestly or fraudulently (imprisonment + fine).

Exam Scenario

A disgruntled former employee of a bank uses his old credentials (which were not deactivated) to access the bank's customer database and sells 50,000 customer records on the dark web. Identify the cyber crimes committed and applicable provisions.

Multiple offences committed: (1) S.43(a) IT Act: unauthorized access to computer system (civil compensation up to Rs.5 crore). (2) S.66 IT Act: computer-related offence done dishonestly (3 years + Rs.5 lakh). (3) S.66C IT Act: identity theft (using old credentials belonging to an authorized user account). (4) S.72A IT Act: disclosure of personal information obtained under lawful contract (employment) without consent (3 years + Rs.5 lakh). (5) S.43A IT Act: bank liable to customers for failure to implement reasonable security practices (not revoking credentials upon termination). (6) S.303 BNS: theft of data (movable property). (7) S.318 BNS: cheating (deceiving the dark web buyers' victims). The bank must report to CERT-In within 6 hours. Investigation by police of Inspector rank+ under S.80. The employee faces cumulative sentences. The bank faces regulatory action for security failure and civil liability to affected customers.