A Review of the Conceptual Evolution of Ransomware-as-a-Service in Cybercrime Ecosystems
Vinayak Badure1, Hariom Yannawar2, Vaishnavi Godbole3 ,Harsha Boghe4 Sakshi Kubade5,Sanika Dhongade6,Dr.Pravin Kulurkar7
1Dept. of Computer Science and Engineering (Cyber Security)
G H Raisoni College of Engineering and Management ,Nagpur
2 Dept. of Computer Science and Engineering (Cyber Security)
G H Raisoni College of Engineering and Management,Nagpur
3 Dept. of Computer Science and Engineering (Cyber Security)
G H Raisoni College of Engineering and Management,Nagpur
4Dept. of Computer Science and Engineering (Cyber Security)
G H Raisoni College of Engineering and Management,Nagpur
5Dept. of Computer Science and Engineering (Cyber Security)
G H Raisoni College of Engineering and Management,Nagpur
6Dept. of Computer Science and Engineering(Cyber Security)
G H Raisoni College of Engineering and Management,Nagpur
7Dr. Pravin Kulurkar, Asstt.Professor, Dept. of Computer Science and Engineering(Cyber Security),
G H Raisoni College of Engineering and Management, Nagpur, India
Abstract -
Ransomware has emerged as one of the most disruptive forms of cybercrime in the modern digital era. With the rapid evolution of cybercriminal operations, the emergence of the Ransomware-as-a-Service (RaaS) model has significantly increased the scale and accessibility of ransomware attacks. This paper reviews the study “Cybercrime Business Evolved: A Concept Analysis of Ransomware-as-a-Service” and evaluates its contribution to cybersecurity research. The reviewed work focuses on clarifying the conceptual structure of the RaaS model and identifying the key actors, characteristics, and operational mechanisms within ransomware ecosystems. Using a structured concept analysis approach, the study identifies defining attributes such as service-based cybercrime operations, distributed roles among actors, and revenue-sharing mechanisms. This review summarizes the research objectives, methodology, and key findings of the study, followed by a critical analysis of its strengths and limitations. The discussion further highlights the implications of the RaaS model for cybersecurity policy, digital infrastructure protection, and organizational risk management. Although the research offers valuable conceptual insights into the evolving cybercrime economy, future studies should integrate empirical data and case-based analyses to strengthen the understanding of ransomware ecosystems.
Key Words:
Cybercrime, cybersecurity, ransomware, ransomware-as-a-service, digital crime economy.
