CYBERSECURITY TRENDS:  AN ANALYSIS OF ONLINE COMMUNITIES ON REDDIT AND DISCORD

Erick De Oliveira; Rodrigo Franklin Frogeri; Ana Amélia Furtado de Oliveira

doi:10.36674/mythos.v18i1.1048

Authors

Erick De Oliveira University Center of Southern Minas - UNISMG https://orcid.org/0009-0008-3844-2396
Rodrigo Franklin Frogeri Centro Universitário do Sul de Minas - UNISMG https://orcid.org/0000-0002-7545-7529
Ana Amélia Furtado de Oliveira University Center of Southern Minas - UNISMG https://orcid.org/0009-0006-9782-4736

DOI:

https://doi.org/10.36674/mythos.v18i1.1048

Keywords:

Discussion groups, Lexicographic analysis, QualiGPT, Information security, Knowledge exchange, Iramuteq

Abstract

In the current cybersecurity landscape, online discussion groups serve as essential collaborative spaces for knowledge exchange among professionals, researchers, and enthusiasts. Cooperation among participants and the sharing of experiences are critical for identifying and understanding cyber threats, enabling the rapid and effective adoption of preventive and corrective measures. Accordingly, this study aims to analyze the main cybersecurity trends discussed in online groups within specialized virtual communities, such as Reddit and Discord. The central research question guiding the analysis was: What are the main cybersecurity trends discussed in online groups? The data analyzed consist of posts, interactions, and debates extracted from online communities dedicated to cybersecurity, covering the period from 2022 to 2025 and totaling 2,108,803 raw records. To organize and process the data, IRaMuTeQ (Interface of R for Multidimensional Analysis of Texts and Questionnaires) was employed, enabling lexical analysis and multivariate statistical analysis of the corpus. Subsequently, QualiGPT was used to further deepen and interpret the results associated with the identified thematic classes. The findings contribute to the ongoing debate on cybersecurity trends by offering new insights into the challenges, practices, and impacts present in specialized virtual environments. The analyses indicate that these spaces function as environments for collaborative learning and professional development. Discussions ranged from digital defense practices to career pathways, highlighting the close integration of theory and practice within the cybersecurity field.

Author Biographies

Erick De Oliveira, University Center of Southern Minas - UNISMG

Bachelor's degree in Information Systems from the University Center of Southern Minas Gerais (UNISMG).

Rodrigo Franklin Frogeri, Centro Universitário do Sul de Minas - UNISMG

Rodrigo Franklin Frogeri holds a Ph.D. in Information Systems and Knowledge Management from FUMEC University, Brazil (2019). He also holds a Master’s degree in Business Administration (2014) and three specializations: Information Technology Management (2011), Higher Education Teaching (2005), and Computer Networks (2003). He earned his bachelor’s degree in Computer Science in 2001. Currently, he is a professor in the Master’s Program in Management and Regional Development at Centro Universitário do Sul de Minas (UNIS-MG), Brazil, and in the Master’s Program in Data Science at Universidad Científica del Sur, Peru. At UNIS-MG specialization programs, he has taught courses including Software Engineering with Java, Application Development for Mobile Devices, Computer Network Technologies and Management, Cybersecurity and Computer Forensics, Information Technology Management, and Information Technology Governance. Currently, he teaches courses in Big Data and Competitive Intelligence, Strategic Management of Information Technology, and Data Science and Artificial Intelligence. At Universidad Científica del Sur (Peru), he teaches in the Data Science specialization program. He is the Editor-in-Chief of Mythos Journal (ISSN: 1984-0098). Additionally, he is a Research Productivity Fellow of FAPEMIG (Research Support Foundation of the State of Minas Gerais) and CNPq (National Council for Scientific and Technological Development). His main research lines are Organizational Ambidexterity; IT Ambidexterity; Innovation Management; Information Technology Governance in Small and Medium Enterprises; Knowledge Management; Knowledge Diplomacy. As a reviewer, he has been actively acting in Brazilian and international publishers as well as International Conferences.

Ana Amélia Furtado de Oliveira, University Center of Southern Minas - UNISMG

Master's and PhD in Linguistic Studies from São Paulo State University (UNESP), São José do Rio Preto campus, with a research project in the field of Linguistic Analysis in Specialized Texts. Graduated from the same institution in Languages with a qualification in Translation, she has worked since 2009 at the Southern Minas Gerais Teaching and Research Foundation (FEPESMIG - UNIS GROUP), working at its different units (Varginha, São Lourenço, Três Pontas, and Pouso Alegre). She is a content teacher and develops technical work focused on distance learning at the IES. She also holds a degree in Portuguese Language and Literature. She currently teaches Communication and Expression, Thesis Guidance, Psycholinguistics, and other specific subjects in the Language and Literature course. She is the coordinator of the Research and Extension Department of the UNIS Group.

References

Bendler, D., & Felderer, M. (2023). Competency Models for Information Security and Cybersecurity Professionals: Analysis of Existing Work and a New Model. ACM Trans. Comput. Educ., 23(2), 25:1-25:33. https://doi.org/10.1145/3573205

CERN. (2019). The birth of the Web. https://home.cern/science/computing/birth-web

D. Walden. (2019). ARPANET 50th Anniversary Marked at 2019 AAAS Annual Meeting. IEEE Annals of the History of Computing, 41(2), 61–63. https://doi.org/10.1109/MAHC.2019.2913715

Daya, B. (2013). Network security: History, importance, and future. University of Florida Department of Electrical and Computer Engineering, 4.

De Wever, B., Schellens, T., Valcke, M., & Van Keer, H. (2006). Content analysis schemes to analyze transcripts of online asynchronous discussion groups: A review. Computers & Education, 46(1), 6–28. https://doi.org/10.1016/j.compedu.2005.04.005

FBI. (2018). The Morris Worm: 30 Years Since First Major Attack on the Internet. https://www.fbi.gov/news/stories/morris-worm-30-years-since-first-major-attack-on-internet-110218

Fisk, N., Kelly, N. M., & Liebrock, L. (2023). Cybersecurity communities of practice: Strategies for creating gateways to participation. Computers & Security, 132, 103188. https://doi.org/10.1016/j.cose.2023.103188

Furfaro, A., Argento, L., Parise, A., & Piccolo, A. (2017). Using virtual environments for the assessment of cybersecurity issues in IoT scenarios. Simulation Modelling Practice and Theory, 73, 43–54. https://doi.org/10.1016/j.simpat.2016.09.007

Furnell, S. (2021). The cybersecurity workforce and skills. Computers & Security, 100, 102080. https://doi.org/10.1016/j.cose.2020.102080

Gao, Y. (2024). Cyber Attacks and Defense: AI-Driven Approaches and Techniques. Academic Journal of Computing & Information Science, 7(7). https://doi.org/10.25236/AJCIS.2024.070706

Georgakopoulos, D., & Jayaraman, P. P. (2016). Internet of Things: From internet-scale sensing to smart services. Computing, 98, 1041–1058. https://doi.org/10.1007/s00607-016-0510-0

Ho, S. M., & Gross, M. (2021). Consciousness of cyber defense: A collective activity system for developing organizational cyber awareness. Computers & Security, 108, 102357. https://doi.org/10.1016/j.cose.2021.102357

Hsu, Y.-C., Ching, Y.-H., & Grabowski, B. L. (2014). Web 2.0 Applications and Practices for Learning Through Collaboration. In J. M. Spector, M. D. Merrill, J. Elen, & M. J. Bishop (Eds), Handbook of Research on Educational Communications and Technology (pp. 747–758). Springer. https://doi.org/10.1007/978-1-4614-3185-5_60

IEEE. (2025). TCP Design Published | IEEE Communications Society. IEEE COMSOC. https://www.comsoc.org/node/19581

IRaMuTeQ. (n.d.). Formatage des corpus texte. http://www.iramuteq.org/documentation/formatage-des-corpus-texte

Islam, M. S., & Xiangdong, L. (2025). Guardians of the Web: The Evolution and Future of Website Information Security (No. arXiv:2505.04308). arXiv. https://doi.org/10.48550/arXiv.2505.04308

Kanca, A., & Sa?iro?lu, ?. (2021). Sharing Cyber Threat Intelligence and Collaboration. 167–172. https://doi.org/10.1109/ISCTURKEY53027.2021.9654328

Lambrinoudakis, C. (2018). The General Data Protection Regulation (GDPR) Era: Ten Steps for Compliance of Data Processors and Data Controllers. In Trust, Privacy and Security in Digital Business (Vol. 11033). Springer International Publishing. https://doi.org/10.1007/978-3-319-98385-1_1

Madani, P., & McGregor, C. (2024). Cybersecurity Issues in Space Optical Communication Networks and Future of Secure Space Health Systems. IEEE Aerospace Conference. https://doi.org/10.1109/AERO58975.2024.10521087

Margolis, J., Oh, T. T., Jadhav, S., Kim, Y. H., & Kim, J. N. (2017). An In-Depth Analysis of the Mirai Botnet. 2017 International Conference on Software Security and Assurance (ICSSA), 6–12. https://doi.org/10.1109/ICSSA.2017.12

Martins, C. P. dos S., Vasconcelos, A. M. de, & Aguirre, A. de B. (2022). Uso do software Iramuteq na análise da produção científica sobre as compras públicas. Anais Do XLVI Encontro Da ANPAD. XLVI Encontro da ANPAD - EnANPAD, Online. https://anpad.com.br/uploads/articles/120/approved/6a13382a520e0420014027350a0b3eb4.pdf

Möllers, N. (2021). Making Digital Territory: Cybersecurity, Techno-nationalism, and the Moral Boundaries of the State. Science, Technology, & Human Values, 46(1), 112–138. https://doi.org/10.1177/0162243920904436

Murugesan, S. (2007). Understanding Web 2.0. IT Professional, 9(4), 34–41. https://doi.org/10.1109/MITP.2007.78

NIST. (2013, November 12). Cybersecurity Framework. NIST. https://www.nist.gov/cyberframework

P. Kaushik, A. M. Rao, D. P. Singh, S. Vashisht, & S. Gupta. (2021). Cloud Computing and Comparison based on Service and Performance between Amazon AWS, Microsoft Azure, and Google Cloud. 2021 International Conference on Technological Advancements and Innovations (ICTAI), 268–273. https://doi.org/10.1109/ICTAI53825.2021.9673425

Piurcosky, F. P., Costa, M. A., Frogeri, R. F., & Calegario, C. L. L. (2019). A lei geral de proteção de dados pessoais em empresas brasileiras: Uma análise de múltiplos casos. SUMA DE NEGÓCIOS, 10(23), 89–99.

Ramaseri-Chandra, A. N., & Pothana, P. (2024). Cybersecurity threats in Virtual Reality Environments: A Literature Review. 2024 Cyber Awareness and Research Symposium (CARS), 1–7. https://doi.org/10.1109/CARS61786.2024.10778838

Reinert, M. (1990). ALCESTE UNE METHODOLOGIE D’ANALYSE DES DONNEES TEXTUELLES ET UNE APPLICATION: AURELIA DE GERARD DE NERVAL. Bulletin of Sociological Methodology/Bulletin de Méthodologie Sociologique, 26(1), 24–54.

Rekouche, K. (2011). Early Phishing (No. arXiv:1106.4692). arXiv. https://doi.org/10.48550/arXiv.1106.4692

Safaei Pour, M., Nader, C., Friday, K., & Bou-Harb, E. (2023). A Comprehensive Survey of Recent Internet Measurement Techniques for Cyber Security. Computers & Security, 128, 103123. https://doi.org/10.1016/j.cose.2023.103123

Salahdine, F., Han, T., & Zhang, N. (2023). 5G, 6G, and Beyond: Recent advances and future challenges. Annals of Telecommunications, 78(9), 525–549. https://doi.org/10.1007/s12243-022-00938-3

Seo, S.-H., Gupta, A., Mohamed Sallam, A., Bertino, E., & Yim, K. (2014). Detecting mobile malware threats to homeland security through static analysis. Journal of Network and Computer Applications, 38, 43–53. https://doi.org/10.1016/j.jnca.2013.05.008

Shuai Zhang, Xuebin Chen, Shufen Zhang, & Xiuzhen Huo. (2010). The comparison between cloud computing and grid computing. 2010 International Conference on Computer Application and System Modeling (ICCASM 2010), 11, V11-72. https://doi.org/10.1109/ICCASM.2010.5623257

Sousa, Y. S. O. (2021). O Uso do Software Iramuteq: Fundamentos de Lexicometria para Pesquisas Qualitativas. Estudos e Pesquisas em Psicologia, 21(4), 1541–1560. https://doi.org/10.12957/epp.2021.64034

Specht, S., & Lee, R. (2003). Taxonomies of Distributed Denial of Service Networks, Attacks, Tools, and Countermeasures (p. 20). Department of Electrical Engineering Princeton Architecture Laboratory for Multimedia and Security. https://www.princeton.edu/~rblee/ELE572Papers/Fall04Readings/DDoSSurveyPaper_20030516_Final.pdf

Tanenbaum, A., & Feamster, N. (2021). Redes de Computadores. Bookman.

TrendMicro. (2015). 20 Years of Macro Malware: From Harmless Concept to Targeted Attacks. https://www.trendmicro.com/vinfo/gb/security/news/cybercrime-and-digital-threats/20-years-of-macro-malware-from-harmless-concept-to-targeted-attacks

Tzavara, V., & Vassiliadis, S. (2024). Tracing the evolution of cyber resilience: A historical and conceptual review. International Journal of Information Security, 23(3), 1695–1719. https://doi.org/10.1007/s10207-023-00811-x

Walshe, T., & Simpson, A. (2020). An Empirical Study of Bug Bounty Programs. 2020 IEEE 2nd International Workshop on Intelligent Bug Fixing (IBF), 35–44. https://doi.org/10.1109/IBF50092.2020.9034828

Wenger, E. (1998). Communities of Practice: Learning, Meaning, and Identity. Cambridge University Press. https://doi.org/10.1017/CBO9780511803932

Wired. (2004). Symptoms of Our Time, Part One. Wired. https://www.wired.com/2004/09/symptoms-of-our-3/

Wired. (2016). We run down the worst security breaches of 2016 and reveal how to stay safe in 2017. https://www.wired.com/story/biggest-hacks-2016/

Wu, M., Aranovich, R., & Filkov, V. (2021). Evolution and differentiation of the cybersecurity communities in three social question and answer sites: A mixed-methods analysis. PLOS ONE, 16(12), e0261954. https://doi.org/10.1371/journal.pone.0261954

Yang, W., Prasad, M. R., & Xie, T. (2018). EnMobile: Entity-based characterization and analysis of mobile malware. Proceedings of the 40th International Conference on Software Engineering, 384–394. https://doi.org/10.1145/3180155.3180223

Yigit, Y., Ferrag, M. A., Sarker, I. H., Maglaras, L. A., Chrysoulas, C., Moradpoor, N., & Janicke, H. (2024). Critical Infrastructure Protection: Generative AI, Challenges, and Opportunities (No. arXiv:2405.04874). arXiv. https://doi.org/10.48550/arXiv.2405.04874

Z. Ma, M. Xiao, Y. Xiao, Z. Pang, H. V. Poor, & B. Vucetic. (2019). High-Reliability and Low-Latency Wireless Communication for Internet of Things: Challenges, Fundamentals, and Enabling Technologies. IEEE Internet of Things Journal, 6(5), 7946–7970. https://doi.org/10.1109/JIOT.2019.2907245

Zhang, H., Wu, C., Xie, J., Kim, C., & Carroll, J. M. (2023). QualiGPT: GPT as an easy-to-use tool for qualitative coding. 1–25.

Zhang, Z., Ning, H., Shi, F., Farha, F., Xu, Y., Xu, J., Zhang, F., & Choo, K.-K. R. (2022). Artificial intelligence in cyber security: Research advances, challenges, and opportunities. Artificial Intelligence Review, 55(2), 1029–1053. https://doi.org/10.1007/s10462-021-09976-0