Methodes Of Attack

Question 1

Malware

Answer 1

A software designed to harm device or network

Question 2

Virus

Answer 2

A malware program that modifies other computer programs by inserting its own code to damage and/or destroy data

Example of: Malware

Question 3

Worm

Answer 3

Malware that self replicates, spreading across the network and infecting computers

Example of: Malware

Question 4

Ransomware

Answer 4

A malicious attack during which threat actors encrypt an organisations data and demand payment to restore access

Example of: Malware

Question 5

Spyware

Answer 5

Malicious software installed on a users computer without their permission, which is used to spy on and steel user data

Example of: Malware

Question 6

Phishing

Answer 6

The use of digital communications to trick people into revealing sensitive data or deploying malicious software.

Question 7

Spear Phishing

Answer 7

A malicious email attack targeting a specific user or group of users that appears to originate from a trusted source

Example of: Phishing

Question 8

Whaling

Answer 8

A form of a spear phishing during which threat actors target executors in order to gain access to sensitive data

Example of: Phishing

Question 9

Business email compromise

Answer 9

BEC an attack in which a threat actor impersonate a known source to obtain a financial advantage

Example of: Phishing

Question 10

Vishing

Answer 10

The exploitation of electronic voice communication to obtain sensitive information or to impersonate a known source

Example of: phishing

Question 11

Social engineering

Answer 11

Manipulation technique that exploits human error to gain unauthorised access to sensitive, private, and/or valuable data

Question 12

Social media phishing

Answer 12

An attack in which threat actor collects detailed information about their target on social media sites before initiating an attack

Example of: social engineering

Question 13

Watering hole attack

Answer 13

An attack in which a threat actor compromises a website frequently visited by a specific group of users

Example of: social engineering

Question 14

Physical social engineering

Answer 14

An attack in which threat actor impersonate an employee, customer, or vendor to obtain unauthorised access to a physical location

Example of: social engineering

Question 15

USB baiting

Answer 15

An attack in which a threat actor strategically leaves a Malware USB stick for an employee to find and unknowingly infected network

Example of: social engineer