🦠
Malware
Malicious software designed to infiltrate or damage systems. Types include viruses, worms, trojans, and spyware.
- Viruses — attach to files and spread when executed
- Worms — self-replicate across networks
- Trojans — disguise as legitimate software
- Spyware — secretly monitor activity
🎣
Phishing
Social engineering attacks that trick users into revealing credentials or installing malware via fraudulent messages.
- Email phishing — mass fake emails
- Spear phishing — targeted at specific individuals
- Smishing — SMS-based phishing
- Vishing — voice call phishing
🔒
Ransomware
Malware that encrypts a victim's files and demands payment for decryption. One of the most costly threats today.
- Often delivered via phishing or exploit kits
- Can spread laterally across a network
- Double extortion: encrypt + threaten to leak data
- Paying does not guarantee recovery
🎭
Social Engineering
Manipulating people — not systems — to gain access. Exploits trust, urgency, and authority.
- Pretexting — fabricated scenarios
- Baiting — tempting offers or USB drops
- Tailgating — physical access follow-along
- Quid pro quo — a service for information
💥
DDoS Attacks
Distributed Denial of Service attacks overwhelm a target with traffic from many sources, making services unavailable.
- Often use botnets of compromised devices
- Volumetric, protocol, and application-layer types
- Can be used as a smokescreen for other attacks
🔓
Man-in-the-Middle
An attacker intercepts communication between two parties to eavesdrop or alter data.
- Exploits unencrypted networks (e.g. public Wi-Fi)
- DNS spoofing redirects to fake sites
- SSL stripping downgrades HTTPS to HTTP