Cyber attacks can take various forms depending on the amount of damage they cause. They are divided into two categories:

a). Targeted attacks
b). Non-targeted attacks

In targeted attacks, the target of the attack is usually the organization, company, or individuals while in non-targeted attacks, in addition to the company, the potential victims may be others.

Targeted Attacks:

Targeted attacks use the following means/tools to achieve their goal:

Exhaustive testing: This is the type of attack where criminals use several codes in the hope of guessing the correct one.

Denial of entry: This attack involves malicious software installed on the computer network of the company or target, which automatically becomes part of a botnet. By using the botnet, those controlling the malware overload the company’s networks, resulting in denial of access and interrupting their operation. To avoid this type of attack, it is necessary to use updated firewall software.

Spear phishing: This is the evolution and much more dangerous method of attack than ‘phishing.’ The attacker collects the information they want about the victim using social engineering methods. The most common approach is to send an email where the attacker impersonates a trusted entity and contains an electronic link to malicious software.

Credential stuffing: This attack involves using previously compromised certificates or specific common passwords to attempt unauthorized access to the company’s systems.

Non-Targeted Attacks: In the case of non-targeted attacks, the attacker usually uses tools and techniques that provide information about potential targets by discovering the vulnerabilities. Examples of tools and attacks used are the following:

Use of malware: The term “malware” refers to malicious software created with the aim of accessing or causing damage to computer systems without the knowledge or permission of the owner. There are various types of malware, such as:

1. Trojans: This type of malware disguises itself as harmless applications, misleading the user into installing them on their computer system. Once activated, the attacker gains access to the company’s computer system. They are usually used to monitor activities, steal data, or even destroy a system.
2. Viruses and worms: These types of malware are designed to infect the company’s computer systems and spread to as many systems as possible on the company. The difference between a virus and a worm is that a virus requires action and execution by the user to start spreading, while a worm spreads without any action from the user. Both contain malicious code intended to damage the company systems.
3. Ransomware: This type of malware is one of the most common in cases where the attacker demands a ransom from the victim. Once installed on the victim’s computer, it encrypts the files. The attacker then contacts the victim, demanding payment to return the files.
4. Spyware: This specific type of malware, after being installed on the victim’s computer system, transmits personal information and detailed data from their internet browsing. It allows the attacker to monitor and intercept all forms of communication of the victim.

• Watering hole: These attacks aim to intercept data by violating the security of a computer. The attacker discovers websites that the user visits and then installs malicious software on them. These are not frequent attacks, which is why they are not easily detected.

• Social engineering: This type of attack refers to cases where the attacker, impersonating a trusted person, manipulates the user to gain access to personal data. A common trick is to send a mass email stating, for example, that tomorrow there will be a problem with the company’s network, and for any clarification or help, the user should contact a specific number. In such cases, the attacker gains the trust of the user.
• Phishing: The attacker sends mass emails that either contains a malicious link or a file. In both cases, if the user makes the mistake of either clicking on the link or installing the malicious software, the attacker will gain access to the user’s data.