Types of cyber threats in Cybersecurity - Mini Project: Build & Apply

Types of Cyber Threats

📖 Scenario: You work in a small company's IT department. Your manager asks you to create a simple list of common cyber threats to help educate your coworkers about online safety.

🎯 Goal: Create a list of common cyber threats with their brief descriptions to share with your team.

📋 What You'll Learn

Create a dictionary called cyber_threats with exactly these entries: 'Phishing', 'Malware', 'Ransomware', 'Spyware', and 'Denial of Service'.

Add a variable called threat_level and set it to 'High'.

Create a new dictionary called high_threats that includes only the threats with the threat_level of 'High'.

Add a final key-value pair to cyber_threats with the key 'Threat Level' and the value from threat_level.

💡 Why This Matters

🌍 Real World

Understanding common cyber threats helps individuals and organizations protect their data and systems from attacks.

💼 Career

IT professionals and cybersecurity specialists need to recognize and communicate about different types of cyber threats to maintain security.

1

Create the initial cyber threats dictionary

Create a dictionary called cyber_threats with these exact entries and descriptions: 'Phishing': 'Fraudulent emails to steal information', 'Malware': 'Malicious software that damages devices', 'Ransomware': 'Software that locks files until a ransom is paid', 'Spyware': 'Software that secretly collects user data', and 'Denial of Service': 'Attacks that overload systems to cause shutdown'.

Cybersecurity

# Create the cyber_threats dictionary with given entries
# Your code here

Hint

Use curly braces {} to create a dictionary with the exact keys and values given.

2

Add a threat level variable

Add a variable called threat_level and set it to the string 'High'.

Cybersecurity

cyber_threats = {
    'Phishing': 'Fraudulent emails to steal information',
    'Malware': 'Malicious software that damages devices',
    'Ransomware': 'Software that locks files until a ransom is paid',
    'Spyware': 'Software that secretly collects user data',
    'Denial of Service': 'Attacks that overload systems to cause shutdown'
}
# Add the threat_level variable below
# Your code here

Hint

Use a simple assignment to create the variable threat_level with the value 'High'.

3

Filter threats by threat level

Create a new dictionary called high_threats that includes only the threats from cyber_threats where the threat_level is 'High'. Since all threats are considered high, copy all entries from cyber_threats into high_threats.

Cybersecurity

cyber_threats = {
    'Phishing': 'Fraudulent emails to steal information',
    'Malware': 'Malicious software that damages devices',
    'Ransomware': 'Software that locks files until a ransom is paid',
    'Spyware': 'Software that secretly collects user data',
    'Denial of Service': 'Attacks that overload systems to cause shutdown'
}
threat_level = 'High'
# Create high_threats dictionary copying all entries from cyber_threats
# Your code here

Hint

Use a dictionary comprehension to copy all items from cyber_threats into high_threats.

4

Add threat level to the cyber threats dictionary

Add a new key-value pair to the cyber_threats dictionary with the key 'Threat Level' and the value from the variable threat_level.

Cybersecurity

cyber_threats = {
    'Phishing': 'Fraudulent emails to steal information',
    'Malware': 'Malicious software that damages devices',
    'Ransomware': 'Software that locks files until a ransom is paid',
    'Spyware': 'Software that secretly collects user data',
    'Denial of Service': 'Attacks that overload systems to cause shutdown'
}
threat_level = 'High'
high_threats = {key: value for key, value in cyber_threats.items()}
# Add 'Threat Level' key to cyber_threats with value threat_level
# Your code here

Hint

Use the dictionary key assignment syntax to add the new key and value.

Practice

1. Which of the following is a type of cyber threat that tricks users into revealing personal information by pretending to be a trustworthy entity?

easy

A. Phishing

B. Firewall

C. Encryption

D. Backup

Solution

1. Step 1: Understand the definition of phishing

   Phishing is a cyber threat where attackers send fake messages to trick people into giving sensitive data.

2. Step 2: Compare other options

   Firewall protects networks, encryption secures data, and backup saves copies; none trick users.

3. Final Answer:

   Phishing -> Option A

4. Quick Check:

   Tricking users for info = Phishing [OK]

Hint: Phishing always involves fake messages to steal info [OK]

Common Mistakes:

• Confusing phishing with firewall
• Thinking encryption tricks users
• Mixing backup with threats

2. Which of the following correctly describes a Denial of Service (DoS) attack?

easy

A. Installing software to spy on users

B. Stealing passwords from a user

C. Encrypting files for ransom

D. Overloading a system to make it unavailable

Solution

1. Step 1: Define Denial of Service (DoS) attack

   A DoS attack floods a system with traffic to stop it from working properly.

2. Step 2: Eliminate other options

   Stealing passwords is not DoS, encrypting files is ransomware, spying is spyware.

3. Final Answer:

   Overloading a system to make it unavailable -> Option D

4. Quick Check:

   DoS = system overload to block access [OK]

Hint: DoS means making a service stop by flooding it [OK]

Common Mistakes:

• Mixing DoS with password theft
• Confusing ransomware with DoS
• Thinking spyware is DoS

3. What type of cyber threat is demonstrated by this scenario?

"A user receives an email with a link that, when clicked, installs software that records keystrokes."

medium

A. Ransomware

B. Phishing

C. Spyware

D. DoS attack

Solution

1. Step 1: Identify the threat from the scenario

   The software records keystrokes secretly, which is typical of spyware.

2. Step 2: Differentiate from other threats

   Phishing tricks for info, ransomware locks files, DoS overloads systems; none record keystrokes.

3. Final Answer:

   Spyware -> Option C

4. Quick Check:

   Software spying on keys = Spyware [OK]

Hint: Keylogger software = Spyware spying on user actions [OK]

Common Mistakes:

• Confusing phishing with spyware
• Thinking ransomware records keys
• Mixing DoS with spyware

4. A user reports their computer is slow and strange pop-ups appear. Which of these is the most likely cause?

Options:
A) Firewall misconfiguration
B) Spyware infection
C) Strong password use
D) Regular software updates

medium

A. Firewall misconfiguration

B. Spyware infection

C. Strong password use

D. Regular software updates

Solution

1. Step 1: Analyze symptoms of slowness and pop-ups

   Spyware often causes slow performance and unwanted pop-ups by running secretly.

2. Step 2: Rule out other options

   Firewall issues don't cause pop-ups, strong passwords and updates improve security, not cause problems.

3. Final Answer:

   Spyware infection -> Option B

4. Quick Check:

   Slow PC + pop-ups = Spyware [OK]

Hint: Pop-ups and slow PC usually mean spyware [OK]

Common Mistakes:

• Blaming firewall for pop-ups
• Thinking strong passwords cause issues
• Confusing updates with threats

5. A company wants to protect its data from being locked and held for ransom by attackers. Which cyber threat should they focus on preventing?

hard

A. Ransomware

B. Phishing

C. Spyware

D. DoS attack

Solution

1. Step 1: Understand ransomware's effect

   Ransomware encrypts data and demands payment to unlock it, threatening data access.

2. Step 2: Compare with other threats

   Phishing steals info, spyware spies, DoS disrupts service but doesn't lock data.

3. Final Answer:

   Ransomware -> Option A

4. Quick Check:

   Data locked for ransom = Ransomware [OK]

Hint: Ransomware locks files and demands payment [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking spyware locks data
• Mixing DoS with ransomware