Cyber Security Basics: Threats and Malware 101

Cyber threats and attack vectors are the fraudulent strategies and processes used by hackers and cybercriminals to harm the integrity, confidentiality, and availability of digital data. As we continue to integrate technology into every aspect of our lives, the complexity and size of these threats grow, making it critical for individuals and organizations to keep aware of the different forms they can take. We'll examine a wide range of attack vectors in this informative chapter to provide you with the knowledge you need to navigate the dangerous digital environment. The topics listed below will be covered in the following sections:

• Malware: Unpack the world of malicious software, including Viruses, Worms, and Trojans, that can infect and harm your computer systems.
• Phishing Attacks: Understand the manipulative tactics that trick people into revealing sensitive information, often without them even realizing it.
• Denial of Service (DoS) Attacks: Learn how these attacks cripple networks by overwhelming them with traffic, making resources unavailable to legitimate users.
• Insider Threats: Explore the risks posed by individuals within an organization who have inside information concerning its security practices, data, and computer systems.
• Zero-Day Vulnerabilities: Discover what makes these previously unknown security flaws particularly dangerous and how they can be exploited before vendors even have a chance to fix them.
• Advanced Persistent Threats (APTs): Get to know these long-term, highly sophisticated attacks that are usually state-sponsored and aimed at stealing valuable information.
• Ransomware Attacks: Familiarize yourself with this form of cyber extortion, where your data is encrypted and held hostage until a ransom is paid.
• Supply Chain Vulnerability: Recognize the importance of addressing supply chain vulnerability in today's interconnected global market to mitigate risks, ensure operational resilience, and maintain business continuity.

Malware, short for "malicious software," serves as a blanket term to describe various forms of harmful software designed to infect, disrupt, or compromise digital devices and the data they contain. With motives ranging from data theft to resource hijacking, these digital attacks have become more sophisticated over time, adopting new methods to evade detection and carry out their malicious objectives. Malware typically consists of code developed by cyber attackers designed to cause extensive damage to data and systems or to gain unauthorized access to a network.

Malware has been a danger to individuals and organizations since the Creeper virus first appeared in the early 1970s. Since then, the world has been attacked with hundreds of thousands of distinct malware types, all with the goal of creating as much disruption and damage as possible.

All varieties of malware follow the same basic pattern: your device becomes infected after you mistakenly download or install malicious software, which is commonly accomplished by clicking on an infected link or visiting an infected website.

The majority of malware infections occur when you accidentally perform anything that causes the malware to be downloaded. This could be as simple as clicking on an infected link in an email or visiting a malicious website. In other cases, malware is distributed by hackers via peer-to-peer file-sharing networks and free software download packages. Including harmful computer code in a popular torrent or download is an efficient approach to transmitting malware to a large number of users. Mobile devices can potentially be infected via text messaging.

The following is a list of some of the more common malware types and definitions:

Viruses

Viruses, maybe the most common type of malware, attach malicious code to clean code and wait for an unwary individual or an automated procedure to execute it. They can spread quickly and widely, much like biological viruses, causing harm to system fundamental operation, corrupting files, and locking people out of their machines. Viruses often require human intervention to propagate, such as opening an infected email attachment or clicking on a malicious link. Antivirus software is an important line of defense against viruses, but new strains emerge all the time to avoid detection.

Worms

Worms get their name from the way in which they infect systems. Starting with one infected system, they weave along through the network, connecting to successive machines to spread the infection. This form of malware can rapidly infect vast networks of devices. Worms can use bandwidth, remove files, and install backdoors to allow unauthorized access in the future. Because of their self-replicating nature, they are particularly difficult to control after they have entered a network.

Trojans

This kind of malware hides within or pretends to be legitimate software, similar to how Greek soldiers concealed in a big horse to deliver their attack. It will penetrate security quietly by installing backdoors that allow other malware variants easy access. Trojans, unlike viruses and worms, do not multiply, but they can be just as dangerous, if not more so. They can offer criminals with unauthorized remote access to an infected computer once enabled. Trojans are typically used for data theft, file deletion, or the creation of a botnet, a network of zombie machines that can then be used to carry out other forms of cyberattacks.

For more insights into the world of cyber threats and malware, be a part of our Introduction to Cybersecurity Online Training.