2. Types of Threats

Cyber threats are malicious activities or potential risks that target computer systems and data. These threats can vary in form, from malware attacks to social engineering tactics, and can come from external or internal sources. Some common types of cyber threats include:

1. Malware

Malware (short for malicious software) refers to software specifically designed to cause harm to a system, steal data, or disrupt operations. Types of malware include:

• Viruses: Programs that attach themselves to legitimate files or programs, spreading to other files and systems.
• Worms: Self-replicating malware that spreads over networks without user intervention.
• Trojan Horses: Malicious software disguised as legitimate software, which, once executed, causes harm or steals data.
• Ransomware: Malware that locks or encrypts a user’s files, demanding a ransom to unlock them.
• Spyware: Malware designed to spy on the user’s activities, often to steal sensitive information like login credentials.

1. Phishing

Phishing is a social engineering technique in which cybercriminals impersonate trusted entities (like banks, companies, or individuals) to trick victims into disclosing sensitive information (such as passwords, credit card details, or Social Security numbers). Phishing is often carried out through emails, text messages, or websites that look legitimate but are designed to capture personal data.

• Spear Phishing: A targeted form of phishing where attackers focus on a specific individual or organization, often using personalized information to increase the likelihood of success.

1. Denial of Service (DoS) Attacks

In a Denial of Service (DoS) attack, an attacker floods a system, network, or website with excessive traffic, rendering it unavailable to legitimate users. The goal of the attack is to disrupt services, cause downtime, or overload the system.

• Distributed Denial of Service (DDoS): A more sophisticated version of DoS, where the attack originates from multiple compromised systems, making it harder to stop.

1. Man-in-the-Middle (MitM) Attacks

A Man-in-the-Middle (MitM) attack occurs when an attacker intercepts communication between two parties without their knowledge. The attacker can eavesdrop, alter, or inject malicious data into the communication.

• Example: Intercepting data from a user logging into a website over an unsecured network, such as public Wi-Fi, to steal login credentials.

1. Insider Threats

An insider threat is when a current or former employee, contractor, or business partner misuses their access to an organization’s systems or data to cause harm or steal sensitive information. These threats are difficult to detect because they come from individuals with authorized access.

• Examples: Data theft, sabotage, or leaking sensitive business information.

1. SQL Injection

SQL Injection is an attack that exploits vulnerabilities in a website’s database query system. Attackers inject malicious SQL code into an input field (such as a search bar or login form) in order to gain unauthorized access to a database and retrieve sensitive information.