Cybersecurity attacks are attempts to damage, disrupt, or gain unauthorized access to computer systems, networks, or data. Think of them like different types of burglaries: some thieves pick locks, others trick people into opening doors, and some break windows to get inside. In the digital world, attackers use various methods to achieve their goals, whether it's stealing information, demanding money, or simply causing disruption.

Understanding these attack types is your first line of defense in cybersecurity. Just as a security guard needs to know all the ways a thief might break in, you need to understand the different methods attackers use. This knowledge helps you recognize threats, protect systems, and respond effectively when attacks happen.

Learning Objectives

• Identify common types of cybersecurity attacks
• Understand how social engineering exploits human psychology
• Recognize network and system attack methods
• Learn how credential attacks compromise security
• Develop awareness of real-world attack scenarios

Prerequisites

• Basic computer and internet knowledge
• Understanding of passwords and accounts
• No prior cybersecurity experience needed

How to Approach This Room

1. Read each task carefully, concepts build on each other
2. Use the real-world analogies to connect technical ideas to everyday experiences
3. Pay attention to the attack characteristics, what makes each type unique
4. Complete all knowledge check questions to reinforce learning
5. Think about how each attack might appear in your own digital life

Optional Video

This optional video covers the fundamental concepts of cybersecurity attacks. It's helpful but not required to complete the room.

What is Social Engineering?

Social engineering is the art of manipulating people into giving up confidential information or performing actions that compromise security. Instead of breaking through digital defenses, social engineers trick the human element, the weakest link in any security system. Think of it like a con artist who convinces you to hand over your house keys rather than trying to pick the lock.

These attacks work because they exploit natural human tendencies: trust, helpfulness, curiosity, and fear. A successful social engineer understands psychology and uses it to bypass even the strongest technical security measures.

Three Common Social Engineering Attacks

Phishing - The Digital Fishing Expedition

Phishing sends fraudulent messages that appear to come from reputable sources. Like a fisherman casting many lines hoping for a bite, attackers send thousands of emails hoping a few people will "take the bait." Common signs include urgent language, spelling errors, and suspicious links. Example: An email pretending to be from your bank asking you to "verify your account" immediately.

Pretexting - Creating a False Story

Pretexting involves creating a fabricated scenario (the "pretext") to steal information. The attacker plays a role, maybe a tech support agent, a coworker, or an authority figure. Example: A call from "IT support" claiming they need your password to fix a critical system issue. The story sounds plausible, making you more likely to comply.

Baiting - Offering Something Tempting

Baiting offers something enticing in exchange for information or access. This could be a "free" music download, a USB drive labeled "Executive Salaries" left in a parking lot, or a gift card offer. Like cheese in a mousetrap, the bait looks attractive but conceals danger.

Below is a Visual Demonstration of how Phishing works

Why Social Engineering Works So Well

Social engineering attacks succeed because they target human psychology rather than computer vulnerabilities. They create urgency ("Your account will be closed in 24 hours!"), exploit trust ("I'm from the help desk"), or trigger curiosity ("You won't believe this video!"). The best technical security can't stop someone who willingly gives away their password.

Comparison of Social Engineering Attacks

Attack Type	Method Used	Common Target	Real-World Example
Phishing	Fraudulent emails/messages	General users	Fake Amazon order confirmation email
Pretexting	Fabricated scenarios	Employees, customers	"HR" calling for "verification" of personal details
Baiting	Tempting offers	Curious users	"Free iPhone" contest requiring personal information

Practical Scenario: The Phishing Test

Your company sends a surprise "security test" email offering a $50 gift card for completing a survey. The email looks official with company logos and appears to come from HR. The link goes to a page asking for your login credentials "to verify employment." This is actually a phishing test. The company is checking who falls for it. Real attackers use exactly these methods.

Attacks on Digital Infrastructure

While social engineering targets people, network and system attacks target technology itself. These attacks aim to disrupt services, intercept data, or take control of computer systems. Think of them like different ways to attack a transportation system: blocking all roads (DDoS), secretly listening to phone calls (MITM), or locking the control center and demanding ransom (ransomware).

Understanding these attacks helps you recognize when systems are under threat and why certain security measures exist. Even as a beginner, knowing what these attacks look like makes you more security-aware.

Three Key Network & System Attacks

DDoS: Overwhelming the Defenses

A Distributed Denial of Service (DDoS) attack floods a target with so much traffic that legitimate users can't access it. Imagine 1,000 people suddenly trying to enter a small store at once, no one can get in or out. Attackers use networks of compromised computers (called botnets) to generate this traffic. The goal isn't to steal data but to cause disruption, often for extortion or activism.

MITM: The Digital Eavesdropper

A Man-in-the-Middle (MITM) attack intercepts communication between two parties without their knowledge. Picture someone secretly listening to your phone call and even changing what's said. In digital terms, an attacker positions themselves between you and a website, capturing everything you send (passwords, messages, credit card numbers). Public Wi-Fi networks are common places for MITM attacks.

Ransomware: Digital Kidnapping

Ransomware encrypts files on a computer or network, making them inaccessible until a ransom is paid. It's like someone changing all the locks in your house and demanding money for the keys. Attackers often demand cryptocurrency payments. Recent attacks have targeted hospitals, schools, and businesses, causing real-world harm beyond just data loss.

Below is the Visual Demonstration of DDoS Attack Flow

Below is the Visual Demonstration of the MITM Attack Process

Why These Attacks Matter

Network and system attacks can cause widespread damage. A successful DDoS can take major websites offline for hours. MITM attacks can steal sensitive personal and financial information. Ransomware has forced hospitals to cancel surgeries and businesses to shut down operations. These aren't just technical problems, they have real human and financial costs.

Comparison of Network & System Attacks

Attack Type	Primary Target	Main Goal	Prevention Focus
DDoS	Websites, online services	Disruption, denial of service	Traffic filtering, capacity planning
MITM	Communication channels	Data interception, eavesdropping	Encryption, secure connections
Ransomware	Files, data access	Extortion, financial gain	Backups, security updates

Scenario: The Coffee Shop Wi-Fi Attack

You're using free Wi-Fi at a coffee shop to check your bank account. An attacker on the same network sets up a fake Wi-Fi hotspot with a similar name. You accidentally connect to it instead of the real one. Now the attacker can see everything you do: your bank login, emails, messages. This is a MITM attack in action. Always verify you're on legitimate networks, especially for sensitive activities.

Credentials (usernames and passwords) are the most common way to access digital systems. Attackers know this and have developed multiple methods to steal or guess these "keys to the kingdom." Think of it like different ways a thief might try to get into your house: trying every key on a giant keychain (brute force), checking if your windows are unlocked (password spraying), or having someone inside leave the door open (insider threat).

Protecting credentials is fundamental to cybersecurity. Even with strong technical defenses, weak or stolen passwords can give attackers complete access to systems and data.

Three Types of Credential Attacks

Brute Force: Trying Every Combination

A brute force attack systematically tries every possible password combination until the correct one is found. It's like trying every possible combination on a 3-digit lock (000, 001, 002... up to 999). Modern computers can try millions of combinations per second. Simple passwords like "password123" or "123456" can be cracked in seconds.

Password Spraying: The Broad Approach

Instead of attacking one account with many passwords, password spraying attacks many accounts with a few common passwords. It's like checking if any house on the street has their front door unlocked with the key "1234". Attackers use lists of commonly used passwords (password, 123456, qwerty, etc.) against many accounts, avoiding account lockouts that happen with repeated failed attempts on a single account.

Insider Threats: The Enemy Within

An insider threat comes from someone within the organization: a current or former employee, contractor, or business partner with authorized access. They might steal data, install malware, or sabotage systems. Motivation can be financial gain, revenge, or coercion by external attackers. Insider threats are particularly dangerous because they already have access and know where valuable data is located.

Below is a Visual Demonstration of Brute Force Attack Process

Why Credential Attacks Are So Common

Passwords remain the primary authentication method for most systems, making them attractive targets. People tend to use weak, memorable passwords and reuse them across multiple accounts. This creates a domino effect, if one account is compromised, others using the same credentials may also be at risk.

Comparison of Credential Attack Methods

Attack Type	Attack Strategy	Best Defense	Example
Brute Force	Try all combinations	Complex passwords, account lockouts	Trying aaaa, aaab, aaac...
Password Spraying	Try common passwords on many accounts	Unique passwords, multi-factor auth	Trying "password" on 1,000 accounts
Insider Threat	Abuse legitimate access	Access controls, monitoring, least privilege	Employee copying customer data before leaving

Real-World Impact of Weak Passwords

In 2021, a major company suffered a data breach because an employee reused their corporate password on a compromised gaming website. Attackers obtained the password from the gaming breach, tried it on the company's email system, and gained access. From there, they accessed customer databases and internal documents. One reused password caused millions in damages.

Scenario: The Password Spray Attack

An attacker obtains a list of 10,000 employee email addresses from a company website. They try three common passwords ("Spring2023!", "CompanyName123", "Welcome1") against all 10,000 accounts. Most attempts fail, but 15 accounts had "Spring2023!" as their password. The attacker now has access to 15 corporate accounts without triggering any single account lockout alarms. This is why unique passwords matter.

Congratulations! You've completed your journey through the world of cybersecurity attack types. You now have a solid foundation for understanding how digital threats work. Think of this knowledge as learning to recognize different types of storms, you may not be a meteorologist yet, but you know when to take shelter and what dangers each storm brings.

This room has equipped you with essential awareness that forms the bedrock of cybersecurity practice. Whether you continue in cybersecurity or simply want to be more secure online, this knowledge serves as your first line of defense in our digital world.

Key Takeaways

• Social engineering targets people, not technology. Phishing, pretexting, and baiting all manipulate human psychology to bypass security.
• Network attacks disrupt infrastructure. DDoS overwhelms systems, MITM intercepts communication, and ransomware holds data hostage.
• Credential attacks exploit weak access controls. Brute force tries all combinations, password spraying tries common passwords broadly, and insider threats abuse legitimate access.
• No single solution protects against all attacks. Different threats require different defenses - technical, procedural, and educational.
• Awareness is your best defense. Recognizing attack patterns is the first step toward preventing them.

What You Should Now Understand

You should now be able to:

• Identify common cybersecurity attack types by their characteristics
• Explain how different attacks work in simple terms
• Recognize real-world examples of these attacks
• Understand why each attack type is dangerous
• Apply basic security principles to protect against these threats

This room has helped you develop a "security mindset", the habit of thinking about potential threats and vulnerabilities. Like learning to look both ways before crossing the street, this mindset becomes automatic with practice. You're now more likely to question suspicious emails, think twice about using public Wi-Fi for sensitive tasks, and recognize the importance of strong, unique passwords.

Cybersecurity is a continuous learning process. New attack methods emerge constantly, and defenses must evolve alongside them. Stay curious, stay cautious, and keep building on this foundation.