Be Smarter: Who Are Cybercriminals and 4 Ways to Outsmart Them

February 25, 2025
Cyber scammers, online thieves, and fraudsters—collectively, they are criminals who use social engineering techniques to extract personal or corporate data for their own gain. Their attacks, both individual and large-scale, are becoming increasingly frequent. Therefore, "Baltimax" cybersecurity engineer and ESET specialist Lukas Apynis invites readers to understand who we might be dealing with and how to recognize when scammers are trying to manipulate us.

Who Are Cybercriminals?

"These are individuals or groups engaged in illegal online or phone-based activities, usually with the goal of financial gain or acquiring confidential information," explains cybersecurity specialist L. Apynis. Online scammers seek access to sensitive personal or organizational data, attempt to disrupt computer systems, or deceive victims into transferring money using various techniques such as malware, network intrusions, and social engineering scams.

Not all cybercriminals are highly skilled IT professionals. "Some may have completed IT studies or professional courses, but the majority only possess basic IT knowledge and use simple tools. Most phone scammers are quickly trained and only learn how to deceive victims and extract money," says the cybersecurity expert.

The skill levels of online criminals vary depending on their objectives, the scale of their operations, and their methods. However, the most skilled cybercriminals pose the greatest threat, as they can carry out complex attacks, such as espionage or financial data theft.

Do Cybercriminals Work Alone or in Groups?

Cybercriminals operate both individually and in organized groups, depending on the scale of their activities. "There are hacker groups worldwide that are state-sponsored and aim for political or economic advantages through long-term strategies like cyber espionage," comments cybersecurity expert L. Apynis.

Organized cybercriminal teams are well-structured and carry out sophisticated operations such as financial data theft or infrastructure disruption. Each member has a specific role, such as developing malware or hacking systems. In contrast, individual scammers often engage in simpler fraud schemes, while more complex attacks—such as botnet creation—require teamwork and substantial investments.

How Do People Become Cybercriminals?

People often become cybercriminals due to financial motives. Cyber recruiters look for individuals attracted by the promise of "quick and easy money." "Whether for financial gain, curiosity, or involvement in criminal organizations, individuals are often drawn into certain communities that offer opportunities to earn money illegally," says L. Apynis.

One example is investing in a "money mule"—a person who knowingly or unknowingly participates in money laundering by transferring or handling funds from illicit activities. This helps fraudsters obscure the true source of their money and makes it harder for law enforcement to track them down.

The global network of cybercriminals is expanding rapidly. Deceiving someone over the phone or online does not require extensive IT knowledge, as fraud schemes are pre-designed and easy to follow. "Although this may seem like an attractive way to earn money, it’s crucial to understand that engaging in such activities makes you a criminal subject to legal consequences. Moreover, even cybercriminals themselves are often deceived by their own recruiters," adds L. Apynis.

What Are the Main Ways Cybercriminals Try to Deceive Us?

"The most common fraud tactics include email phishing, social engineering, malware, fake websites, and compromised online stores. This year, we’ve noticed an increase in smishing and vishing attempts," says Baltimax cybersecurity engineer and ESET internet security expert L. Apynis, explaining these methods in detail:

  • Smishing (SMS phishing) – This scam involves sending fraudulent text messages, often impersonating trusted organizations like banks or courier services. These messages may urge the recipient to click on a link or provide personal information. Clicking the link can lead to a fake website designed to steal personal data.
  • Vishing (voice phishing) – This scam involves fraudsters calling victims while posing as representatives of official institutions, banks, or IT support. Their goal is to trick victims into revealing sensitive information, such as login credentials or banking details.
How Can We Fight Back Against These Criminals?

"We can combat cybercriminals by educating the public and implementing various security measures, such as additional antivirus protection. Cooperation is also crucial—we report fraudulent websites and information to relevant authorities. Companies should invest in advanced security solutions and provide cybersecurity training for employees," explains the expert. "Moreover, if scammers call you, do not argue or provoke them, as this could lead to an influx of spam messages or calls. The best approach is to simply end the conversation and not waste time."

4 Steps to Combat Cybercriminals:

  1. Public Awareness and Information Sharing – Experts and the media should educate people about cyber fraud tactics and how to recognize them, encourage caution when sharing personal data, and collaborate with law enforcement by reporting new scams to colleagues and loved ones.
  2. Collaboration – Report fraudulent websites and activities to the National Cyber Security Center (NKSC) and other relevant organizations.
  3. Security Measures – Use various security tools, including reliable cybersecurity solutions and two-factor authentication. Companies should implement advanced security strategies, educate employees about potential risks, and conduct cybersecurity training and simulations.
  4. Joint Efforts – Individuals, organizations, and government institutions should unite their efforts to make it more difficult for scammers to succeed.

Related news

Women TechEU: Funding Opportunity for Women-Led Deep Tech Startups
Women TechEU: Funding Opportunity for Women-Led Deep Tech Startups
Women-led deep tech startups are invited to apply for Women TechEU, an EU-funded initiative designed to support early-stage companies led by women and help them grow into Europe’s future technology leaders. The 2026–2028 edition of Women TechEU will provide €12 million in equity-free funding to support 160 women-led deep tech startups across Europe. Each selected company will receive a €75,000 non-dilutive grant, complemented by a tailored business development programme including mentoring, coaching, training, expert guidance, investor and corporate matchmaking, and networking opportunities. The application process consists of two stages. Applicants must first complete the Eligibility Strand, a simplified eligibility check designed to confirm whether the company meets the programme’s participation requirements. Eligibility applications are accepted on a continuous basis, with weekly cut-off dates every Tuesday at 17:00 Brussels time. The Eligibility Strand remains open until 14 June 2027. Applicants that successfully pass the eligibility check will be invited to submit a Full Proposal. Four Full Proposal submission deadlines are scheduled between 2026 and 2027. Women TechEU also places a strong emphasis on addressing geographical disparities in Europe’s innovation ecosystem. Forty per cent of the budget available at each cut-off is reserved for applicants based in Horizon Europe Widening countries, including Lithuania. The programme is open to eligible women-led early-stage deep tech startups established in EU Member States and eligible Horizon Europe associated countries. Lithuanian women-led deep tech startups are encouraged to explore this opportunity and apply for financial and tailored business development support that can help accelerate their growth, strengthen investor readiness and expand their European networks. More information about the programme, eligibility requirements and application process is available on the official Women TechEU website: womentecheurope.eu.
More
“Discover VILNIUS TECH” challenge is over, but digital badge opportunities are expanding (the list of the winners)
“Discover VILNIUS TECH” challenge is over, but digital badge opportunities are expanding (the list of the winners)
The “Discover VILNIUS TECH” challenge, held during the first week of September, helped students discover the VILNIUS TECH digital badge system – nearly 800 new participants joined, and 10 of them won prizes provided by VILNIUS TECH. During the challenge, students unlocked eight digital badge programmes and discovered more than 200 extracurricular activities offered by the University. But the challenge is only the beginning: students can continue earning digital badges throughout their studies and use their certificates to showcase their skills and prepare for their careers. “The meetings held during Integration Week confirmed that students are interested in preparing for their careers from their very first year – learning how to prepare a strong CV, feel more confident in job interviews, and use digital badges and their certificates to present their competencies to employers,” says Assoc. Prof. Dr Ingrida Leščauskienė, Head of the VILNIUS TECH Digital Badge System. This year, students are also being introduced to the new career preparation digital badge programme “DISCOVER. GRAVITY”, developed within the framework of international Erasmus+ project “YOUTH 360”. Students will be able to earn digital badges by participating in career seminars led by professionals, the GRAVITY Career Day, and other career preparation activities. The winners are: Lukas Stankūnas (Faculty of Civil Engineering). Ernas Erlikas(Faculty of Electronics). Liepa Gustaitė (Faculty of Mechanics). Sofiya Eitminovich (Faculty of Fundamental Sciences). Yehor Kumeiko (Faculty of Mechanics). Aironas Šalkauskas (Faculty of Civil Engineering). Kotryna Simaitytė (Faculty of Mechanics). Rytis Stankevičius (Faculty of Electronics). Ugnius Tilvikas (Faculty of Mechanics). Ieva Vilimaitė (Antanas Gustaitis Aviation Institute). Congratulations to the winners! The selected winners will receive VILNIUS TECH merchandise – T-shirts and mugs. Prizes can be collected on 8–9 September at Saulėtekio Ave. 11, Central Building (S1), 3th floor, from 9:30–15:00. More information about the VILNIUS TECH digital badge system is available here.
More