4.1 Threats to Devices

Devices face varied threats

A threat is any circumstance or event with potential to harm a device or system. Common device-level threats include malware (viruses, worms, trojans, ransomware, spyware), unauthorized access, physical theft or damage, and misconfiguration. Recognizing threat types helps determine which safeguards — like antivirus software, patches, or physical locks — best protect a given device.

Malware types differ in behavior

Viruses attach to files and spread when executed; worms self-replicate across networks without user action; trojans disguise themselves as legitimate software; ransomware encrypts data and demands payment; spyware secretly collects user data; keyloggers record keystrokes to steal credentials. Identifying the malware type guides the correct removal and prevention strategy.

Vulnerabilities enable exploits

A vulnerability is a weakness in a device's hardware, software, or configuration that a threat can exploit. An exploit is the method used to take advantage of that vulnerability. Outdated software, weak passwords, and unpatched firmware are common vulnerabilities. Reducing vulnerabilities through updates and strong configurations lowers the device's attack surface.

Key terms

Threat

Any circumstance or event with the potential to cause harm to a device or system.

Vulnerability

A weakness in hardware, software, or configuration that a threat can exploit.

Exploit

The specific method or code used to take advantage of a vulnerability.

Ransomware

Malware that encrypts a victim's data and demands payment for its release.

Trojan

Malware disguised as legitimate software to trick users into installing it.

Try an AP-style question

What attack is this?

1. Vishing
2. Baiting
3. DDoS
4. Replay