Cybercrime: Ransomware, and government actions for analyzing criminal behavior in the province of Córdoba

In this paper, government actions aimed at addressing the analysis of criminal behavior by cybercriminals in ransomware attacks through the use of ICT (information and communication technology) in private and public organizations in the province of Córdoba were described. The method used had a qualitative approach of a non- experimental type, with a descriptive and explanatory scope. In addition, as instruments, documents and a semi-structured interview were used. For its part, it was inquired about the application of the operational analysis of cases to this criminal typology by the Judiciary of Córdoba. In addition, the most resonant cases that occurred in Córdoba in the last ten years were established, and the difference between cybercrime and cybercrime of ransomware behavior was delimited. Among the results, there is a coincidence of factors and behaviors between cases and a great contextual influence of the situation in terms of computer security in organizations, in their ability to react. In turn, no information was found that shows that the operational analysis of cases has been used for these crimes in the province of Córdoba. Therefore, doors were opened to new lines of investigation and the creation of new methodologies of governmental approach. Emerging as the main recommendation, the creation of a specific case analysis method for the study of the behavior of cybercriminals and their victims, in order to identify the causal roots of the phenomenon and thus develop more effective government policies for its prevention and control.