Threats and Attack Types

Understanding how attackers operate is essential for building effective defences. This lesson covers the most common threat categories and attack techniques used in real-world cyber incidents.

---

Malware

Malware is malicious software designed to damage, disrupt, or gain unauthorised access to systems:

Type	Behaviour	Example
Virus	Attaches to files and spreads when executed	ILOVEYOU
Worm	Self-replicating, spreads without user interaction	WannaCry, NotPetya
Trojan	Disguises itself as legitimate software	Emotet
Ransomware	Encrypts files and demands payment	LockBit, REvil, ALPHV
Spyware	Secretly monitors user activity	Pegasus
Adware	Displays unwanted advertisements	Fireball
Rootkit	Hides deep in the OS to maintain persistent access	ZeroAccess
Keylogger	Records keystrokes to steal credentials	HawkEye
Fileless malware	Lives in memory, no files on disk	PowerShell-based attacks

How Malware Spreads

• Email attachments and malicious links
• Drive-by downloads from compromised websites
• Infected USB drives
• Exploiting software vulnerabilities
• Malicious software updates (supply chain attacks)

---