1.2 Cyber Attacks

Anatomy of a cyber attack

A cyber attack is a deliberate attempt to exploit a vulnerability (a weakness in a system) to compromise confidentiality, integrity, or availability (the CIA triad). A threat actor exploits the vulnerability, creating risk — the likelihood and impact of harm. Understanding this chain helps identify where defenses should be placed.

Types of malicious software

Malware includes several categories: viruses (attach to files, need user action to spread), worms (self-replicate without user action), trojans (disguise as legitimate software), ransomware (encrypts data for payment), and spyware (secretly collects user data). Each exploits different vulnerabilities and requires different defenses.

Social engineering & network attacks

Social engineering manipulates people rather than systems — e.g., phishing (deceptive emails/messages tricking users into revealing info) and pretexting (fabricating a scenario to gain trust). Network-based attacks include DoS/DDoS (overwhelming a system to deny service) and man-in-the-middle attacks (intercepting communication between two parties).

Key terms

Vulnerability

A weakness in a system that a threat actor can exploit.

Worm

Self-replicating malware that spreads across networks without user action.

Phishing

Deceptive messages tricking users into revealing sensitive information.

Ransomware

Malware that encrypts victim's data and demands payment for decryption.

Man-in-the-middle attack

An attack where the attacker secretly intercepts communication between two parties.

Try an AP-style question

What type of attack is this?

1. Ransomware
2. Brute force
3. Denial of service
4. On-path (man-in-the-middle)