Greek CyberCrimes: Hacking, Phishing, Ransomware and others

Hacking (ie unauthorized access to information systems or Electronic data, according to the Greek Penal Code (GPC)) It is a criminal offence based on art. 370C par. 2 Greek Penal Code (GPC) under art. 370C par. 2 GPC, hacking will be punished by imprisonment. If the action is aimed at international relations or the State Security, other provisions of GPC shall apply (Article 148 of GPC criminal provision for spying), with a maximum sentence of 10 years’ imprisonment if the data is used to cause damage to the state. Furthermore, Article 292B states that hacking is an offence punishable with one to five years depending on the severity of the result, if it causes serious obstacles to the operation of an information system or when the data has been modified or suppressed as a result of Hacking.

“Phishing”  is defined as: the fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers, “an email that is likely a phishing scam”
Taking the above into account, Art. 370D GPC applies for a perpetrator committing the said activity online. The offence of Art 370 carries a sentence of imprisonment from 10 days to 5 years. If the data is diplomatic or military the perpetrator faces the penalties of Art. 146 GPC, which imposes a sentence of imprisonment of up to 10 years. Phishing can also be punished as an inchoate offence (Art. 292C sec. b GPC; Art. 370E sec. b GPC, etc.).

“Ransomware”  is defined as: a type of malicious software designed to block access to a computer system until a sum of money is paid.

The blocking of access of your IT with the use of malicious software or as the Greek penal code refers to it as a “Denial-of-service” constitutes a criminal offence under Art. 292B GPC, and is punishable with a fine and with a minimum of one year of imprisonment.
Furthermore, if a certain tool was used for the attacks, the penalty varies from 1-5 years of imprisonment, while if the attack caused severe damage or targeted critical infrastructure, a penalty of at least two years of imprisonment for each case applies (Art 292B GPC par. 2 sec. a, and secs b and c, respectively).

The infection of the IT system with ransomware, spyware or any other code capable of causing malfunction, damage or denying you service to your system is by itself a criminal offence under Greek Law according to Arts 292B, 292C, 370C par. 2, 370E, 381A and 381B of the GPC, and carries ad sentence depending on the type of infection and or damage caused to the IT system.