-
Malware Attacks: Malware (malicious
software) is a broad category encompassing
various harmful programs designed to infiltrate
and damage systems.
-
Ransomware: Encrypts a victim's data
and demands a ransom payment for the decryption
key.
-
Trojans: Malicious code disguised as
legitimate software that tricks users into
installing it, often creating a backdoor for
hackers.
-
Spyware/Keyloggers: Software that
secretly monitors user activity, collects
sensitive information (passwords, banking
details, keystrokes), and transmits it to the
attacker.
-
Worms: Self-replicating programs that
spread across networks without human
interaction, exploiting software
vulnerabilities.
-
Phishing and Social Engineering: These
attacks exploit human psychology to manipulate
people into revealing sensitive information or
performing actions that compromise security.
-
Phishing: General attempts using
deceptive emails or messages that appear to be
from a trustworthy source to trick victims into
clicking malicious links or providing data.
-
Spear Phishing: Highly targeted
phishing attacks aimed at specific individuals
or organizations, often using personalized
information to seem more credible.
-
Whaling: A type of spear phishing that
specifically targets high-profile executives
(CEOs, CFOs) within an organization.
-
Pretexting: Creating a fabricated
scenario or "pretext" to gain a victim's trust
and extract information.
-
Denial-of-Service (DoS) and Distributed
Denial-of-Service (DDoS) Attacks: These
attacks aim to make a network, website, or
service unavailable to legitimate users by
overwhelming it with excessive traffic or
requests. DDoS attacks are launched from
multiple compromised devices (botnets), making
them harder to stop than a single-source DoS
attack.
-
Code Injection Attacks: Attackers
inject malicious code into a vulnerable
application to change its course of action or
extract data.
-
SQL Injection: Inserts malicious SQL
statements into a data-driven application to
view, alter, or erase database data.
-
Cross-Site Scripting (XSS): Injects
malicious scripts into legitimate websites which
are then executed in the victim's web browser,
allowing the attacker to steal information or
impersonate the user.
-
Man-in-the-Middle (MitM) Attacks: The
attacker intercepts communication between two
parties, secretly eavesdropping on, or altering,
the messages exchanged. This is common on
unsecured Wi-Fi networks and can involve session
hijacking or DNS spoofing.
-
Password Attacks: Various methods to
obtain user credentials to gain unauthorized
access to accounts.
-
Brute Force: Uses a trial-and-error
approach to systematically guess login
information.
-
Credential Stuffing: Uses stolen
credentials from a previous data breach to try
accessing other accounts, relying on password
reuse.
-
Supply Chain Attacks: Targeting
less-secure elements in an organization's supply
chain (e.g., a third-party vendor or software
component) to gain access to the main target.
-
Zero-Day Exploits: Attacks that
leverage a previously unknown or unpatched
software vulnerability, giving the vendor "zero
days" to fix it before the attack occurs.
|