Chapter 1: Understanding Cyber Threats

In this chapter, we delve into the world of cyber threats, exploring the different types of attacks that businesses may face. We discuss the motivations behind cybercrime, such as financial gain and activism. By understanding the adversary's mindset, you can better prepare yourself to defend against their tactics.

We also highlight notable cyber-attacks that have affected businesses in recent years, showcasing the potential consequences of inadequate security measures. This chapter serves as a foundation for the subsequent chapters, laying the groundwork for a comprehensive understanding of cyber security.

Common types of cyber threats:

Malware

Malicious Software (Malware) is a file or code that infects, explores, steals or conducts virtually any behaviour an attacker wants.

Ransomware

A type of malware designed to deny a user or organisation access to files on their computer, encrypting all files and demanding a ransom payment for the decryption key.

Phishing

A technique for attempting to acquire sensitive data, such as bank account numbers, through a fraudulent solicitation in email or on a web site, in which the cybercriminal purports to be a legitimate person or business.

DDoS attacks

A Distributed Denial-of-Service (DDoS) attack is a cybercrime in which the attacker floods a server with internet traffic to prevent users from accessing connected online services and websites.

Identity-Based Attacks

Identity-based attacks occur when cybercriminals target your computer system, network, or account to retrieve your personal information for illegal or malicious activities. Also known as impersonation attacks.

Insider Threats

An insider threat is a threat where an employee or a contractor will use his or her authorised access, knowingly or unknowingly, to do harm to the security and data of the company.

Motivations behind cybercrime:

Financial gain

This is the most common reason for a cyberattack. Cybercrime gangs will gain access to a company’s IT systems to steal sensitive and personal data to sell it on to the highest bidder.

Intellectual property theft

Stealing an idea, creative expression, or invention from an individual or a company. IP theft can refer to someone stealing patents, copyrights, trademarks, or trade secrets. This type of theft is often committed to hold a company or individual to ransom.

Political activism

A cybercrime gang or hacker will attack the IT systems of political parties to leak information or use as blackmail in an attempt to bring political or social change.

Notable cyber-attacks:

WannaCry – 2017 - NHS suffers biggest attack to date

RockYou2021 – 2021 - Largest password compilation of all time leaked online with 8.4 billion passwords

Twitter - 2022 – Flaw in Twitter platform helps leak 5.4 million user account details in a Social Engineering Attack

MOVEit data breach – 2023 - A cyber-attack which targeted the MOVEit file transfer system exposing very sensitive employee data from high-profile businesses