The threat landscape
Malware, phishing, hacking, DoS, insider risk.
Malware — malicious software. Subtypes:
- Virus — attaches to a host file; spreads when the file is opened or shared.
- Worm — self-replicating, spreads automatically over networks.
- Ransomware — encrypts victim's files, demands payment.
- Spyware — secretly collects data (keystrokes, screen captures).
- Trojan — disguises itself as legitimate software.
- Adware — displays unwanted ads, may track usage.
Phishing — social engineering via fake emails/messages/websites. Tricks users into revealing passwords or downloading malware. Variants:
- Spear phishing — targeted at specific individual.
- Whaling — targets senior executives.
- Smishing — SMS phishing.
- Vishing — voice phishing (phone calls).
Hacking / unauthorised access — exploiting software vulnerabilities or weak credentials to enter systems.
DoS / DDoS — overwhelming a server with traffic. Distributed DDoS uses many compromised devices (botnets).
Insider threats — disgruntled or careless employees. Often the largest risk.
Physical theft — laptops, USB drives, paper documents.
Misconfiguration — accidentally exposing data via wrong permissions.