Untitled

Page 1

Unauthorized access/hacking

unatuhorized access is where users attempt to gain access to remote systems without permission of the owner this is illegal and his called "black hat" hacking.hacking that is legally perofrmed by paid specialists testing the secuiruty of digital systems called white hat hacking.there is also grey hat hacking .

social engineering is a criminal activity where they pretend to be a users bank and try to gain sensitive information such as username and password.

phising

is a form of social enginnering and a very common cyberattack in the users email inbox as a spoof email pretending to be a legitamate company

pharming

directed to a fake website and steals them ,then the criminals sign into the real website and using it for further criminal acts

"man in the middle" an attack where the communication between two devices for example a user and a web server is intercepted and potentially tampered with

this type of attack took place in 2014 when a criminal gang stole 6 million by hacking into serveral europeon organisation to steal corporate emails ,which where used to request money

Internal threats

downloads that are illegal or unapproved software that may contain viruses and infect it systems

visting untrustworthy sites which may contain phising threats or contain dowloadable viruses

use of portable storage devices(USBs) may be infected with viruses which used to copy and remove secure data from the organisation

disclosure of data and require security controls a portable storage devices

stealing or leaking information selling to a rival for finachial gain revenge social or policitcal reasons

using overiding security controls usally in a atttempt to acess data or information they should not access

internal threats malicous action

employees could delte customer record

steal confidential information#create fake invoices that will be paid to their own bank account

or install malware