Threats, Attacks & Vulnerabilities Flashcards

What is phishing?

Answer: Fraudulent email scam

Phishing is a type of cyberattack where attackers attempt to trick individuals into revealing sensitive information, such as usernames, passwords, or credit card details. This is typically done by disguising themselves as a trustworthy entity in electronic communication, most commonly through fraudulent emails. The goal is to deceive the recipient into clicking malicious links or providing confidential data.

What is malware?

Answer: Malicious software

Malware is an umbrella term for 'malicious software' designed to disrupt, damage, or gain unauthorized access to a computer system. It encompasses various types of threats, including viruses, worms, Trojans, and ransomware. Malware can steal data, encrypt files, or simply make a system unusable, posing significant security risks.

What is a DDoS attack?

Answer: Flooding service with traffic

A Distributed Denial of Service (DDoS) attack aims to make an online service unavailable by overwhelming it with a flood of traffic from multiple compromised computer systems. This excessive traffic consumes the target's resources, preventing legitimate users from accessing the service. The goal is to disrupt operations and cause service outages.

What is ransomware?

Answer: Data locked for ransom

Ransomware is a type of malicious software that encrypts a victim's files, rendering them inaccessible. The attacker then demands a ransom payment, typically in cryptocurrency, in exchange for the decryption key. If the ransom is not paid, the data may remain encrypted or be permanently lost, making it a highly disruptive form of cyberattack.

What is the main goal of social engineering?

Answer: Trick people for data

The main goal of social engineering is to trick people into divulging confidential information or performing actions that compromise security. Unlike technical attacks, social engineering exploits human psychology, such as trust, fear, or curiosity, rather than system vulnerabilities. Attackers manipulate individuals to gain unauthorized access to systems or data.

Which is a type of malware?

Answer: Trojan

A Trojan, or Trojan horse, is a type of malware that disguises itself as legitimate software to trick users into installing it. Once inside a system, it can create backdoors, steal data, or launch other attacks without the user's knowledge. Trojans are dangerous because they appear harmless, making them difficult to detect until they execute their malicious payload.

What does vulnerability mean?

Answer: Weakness in system

In cybersecurity, a vulnerability refers to a weakness or flaw in a system, application, or network that can be exploited by an attacker. These weaknesses could be in software code, configurations, or even human processes. Identifying and patching vulnerabilities is crucial to prevent unauthorized access, data breaches, and other security incidents.

What is spyware?

Answer: Gathers info secretly

Spyware is a type of malicious software designed to secretly gather information about a user's activities without their knowledge or consent. This can include monitoring keystrokes, capturing screenshots, tracking browsing history, or collecting personal data. Its primary purpose is to covertly transmit this collected information to an unauthorized third party, often for advertising or malicious purposes.

Which is an example of insider threat?

Answer: Employee data theft

An insider threat refers to a security risk that originates from within an organization, often from current or former employees, contractors, or business partners. Employee data theft is a prime example, where an individual with authorized access misuses their privileges to steal sensitive information. These threats are particularly challenging to detect and mitigate due to the trusted nature of the perpetrator.