Common Cyber Attack Vectors(Infographic).pdf
- 1. COMMON CYBER ATTACK VECTORS Fraudulent attempts to obtain Fraudulent attempts to obtain sensitive information by disguising as sensitive information by disguising as a trustworthy entity via email, text, or a trustworthy entity via email, text, or social media. social media. Inserting malicious SQL code into a Inserting malicious SQL code into a database query to manipulate or extract database query to manipulate or extract information. information. PHISHING ATTACKS MALWARE (VIRUSES, WORMS, RANSOMWARE, SPYWARE, ADWARE) Malicious software designed to disrupt, Malicious software designed to disrupt, damage, or gain unauthorized access to damage, or gain unauthorized access to computer systems. computer systems. SOCIAL ENGINEERING Manipulating individuals into divulging Manipulating individuals into divulging confidential information, often by confidential information, often by exploiting human psychology. exploiting human psychology. MAN-IN-THE-MIDDLE (MITM) ATTACKS Intercepting and altering communications Intercepting and altering communications between two parties without their knowledge. between two parties without their knowledge. SQL INJECTION (SQLI)
- 2. Overloading a network, server, or Overloading a network, server, or website with traffic to make it website with traffic to make it unavailable to users. unavailable to users. Employees or contractors who misuse Employees or contractors who misuse their access to compromise security their access to compromise security intentionally or unintentionally. intentionally or unintentionally. DISTRIBUTED DENIAL OF SERVICE (DDOS) ATTACKS ZERO-DAY EXPLOITS Attacking vulnerabilities that are unknown Attacking vulnerabilities that are unknown to the software vendor or unpatched. to the software vendor or unpatched. PASSWORD ATTACKS (BRUTE FORCE, DICTIONARY ATTACKS, CREDENTIAL STUFFING) Attempting to gain unauthorized access Attempting to gain unauthorized access by cracking or guessing passwords. by cracking or guessing passwords. CROSS-SITE SCRIPTING (XSS) Injecting malicious scripts into web Injecting malicious scripts into web applications to execute code in another applications to execute code in another user's browser. user's browser. INSIDER THREATS DRIVE-BY DOWNLOADS Unintended download of malicious Unintended download of malicious software when visiting a compromised software when visiting a compromised website. website.
- 3. Poorly configured cloud environments Poorly configured cloud environments that expose sensitive data to the that expose sensitive data to the internet. internet. CLOUD MISCONFIGURATION IOT VULNERABILITIES Exploiting weak security in Internet of Exploiting weak security in Internet of Things (IoT) devices to gain network Things (IoT) devices to gain network access. access. Ready to secure your business? Take a free cybersecurity posture assessment today Take a free cybersecurity posture assessment today and discover vulnerabilities before cybercriminals do. and discover vulnerabilities before cybercriminals do. visit: www.securitytapestry.com/contact-us