Types of cyber threats in Cybersecurity - Step-by-Step Execution

Concept Flow - Types of cyber threats

Start: User or System

↓

Threat Appears

↓

Threat Action on System

↓

Damage or Data Loss

↓

Detection and Response

↓

System Recovery or Protection

↓

End

This flow shows how a cyber threat appears, is identified by type, acts on the system, causes damage, and then is detected and responded to.

Execution Sample

Cybersecurity

Threats = ["Malware", "Phishing", "Ransomware", "DoS", "MitM", "SQL Injection"]
for threat in Threats:
    print(f"Detected threat type: {threat}")

This code lists common cyber threat types and prints each one as detected.

Analysis Table

Step	Threat Type	Action	Result
1	Malware	Infects system files	System compromised or slowed
2	Phishing	Tricks user to reveal info	User credentials stolen
3	Ransomware	Encrypts files for ransom	Files inaccessible until paid
4	DoS	Overloads network	Service unavailable
5	MitM	Intercepts communication	Data intercepted or altered
6	SQL Injection	Injects malicious code	Database data stolen or corrupted
7	End	No more threats	System needs recovery or protection

💡 All common cyber threats have been identified and their actions described.

State Tracker

Threat Type	Before Action	After Action
Malware	System normal	System infected
Phishing	User unaware	User credentials stolen
Ransomware	Files accessible	Files encrypted
DoS	Service available	Service down
MitM	Communication secure	Communication intercepted
SQL Injection	Database safe	Database compromised

Key Insights - 3 Insights

Why does ransomware make files inaccessible?

Ransomware encrypts files, meaning it locks them with a secret code. Until the code is removed (usually by paying ransom), files cannot be opened. This is shown in execution_table step 3.

How does phishing steal user credentials?

Phishing tricks users into giving their information by pretending to be a trustworthy source. This is a social trick, not a technical hack, as shown in execution_table step 2.

What happens during a Denial of Service (DoS) attack?

DoS floods the network or service with too many requests, making it unable to respond to real users. This causes service downtime, as shown in execution_table step 4.

Visual Quiz - 3 Questions

Look at the execution_table at step 5. What does a Man-in-the-Middle attack do?

A Encrypts files for ransom

B Overloads the network with traffic

C Intercepts communication between parties

D Tricks users into giving passwords

💡 Hint

Refer to execution_table row with Step 5 describing MitM action.

At which step does the system become unavailable due to network overload?

A Step 2

B Step 4

C Step 6

D Step 3

💡 Hint

Check execution_table for DoS attack causing service unavailability.

If phishing was removed from the list, how would variable_tracker change?

A User credentials would remain safe

B Files would be encrypted

C Network would be overloaded

D Database would be corrupted

💡 Hint

Look at variable_tracker row for Phishing showing user credentials stolen.

Concept Snapshot

Types of Cyber Threats:
- Malware: Infects and damages system
- Phishing: Tricks users to steal info
- Ransomware: Encrypts files for ransom
- DoS: Overloads network to block access
- MitM: Intercepts communication
- SQL Injection: Attacks databases
Each threat acts differently but harms security.

Full Transcript

This visual execution shows common types of cyber threats. The flow starts with a threat appearing, identifying its type such as malware or phishing, then acting on the system causing damage like data loss or service downtime. The execution table lists each threat type, its action, and result step-by-step. The variable tracker shows system state before and after each threat acts. Key moments clarify common confusions like how ransomware encrypts files or how phishing steals credentials. The quiz tests understanding by asking about specific steps and effects. This helps learners see how different cyber threats work and affect systems.

Practice

1. Which of the following is a type of cyber threat that tricks users into revealing personal information by pretending to be a trustworthy entity?

easy

A. Phishing

B. Firewall

C. Encryption

D. Backup

Solution

1. Step 1: Understand the definition of phishing

   Phishing is a cyber threat where attackers send fake messages to trick people into giving sensitive data.

2. Step 2: Compare other options

   Firewall protects networks, encryption secures data, and backup saves copies; none trick users.

3. Final Answer:

   Phishing -> Option A

4. Quick Check:

   Tricking users for info = Phishing [OK]

Hint: Phishing always involves fake messages to steal info [OK]

Common Mistakes:

• Confusing phishing with firewall
• Thinking encryption tricks users
• Mixing backup with threats

2. Which of the following correctly describes a Denial of Service (DoS) attack?

easy

A. Installing software to spy on users

B. Stealing passwords from a user

C. Encrypting files for ransom

D. Overloading a system to make it unavailable

Solution

1. Step 1: Define Denial of Service (DoS) attack

   A DoS attack floods a system with traffic to stop it from working properly.

2. Step 2: Eliminate other options

   Stealing passwords is not DoS, encrypting files is ransomware, spying is spyware.

3. Final Answer:

   Overloading a system to make it unavailable -> Option D

4. Quick Check:

   DoS = system overload to block access [OK]

Hint: DoS means making a service stop by flooding it [OK]

Common Mistakes:

• Mixing DoS with password theft
• Confusing ransomware with DoS
• Thinking spyware is DoS

3. What type of cyber threat is demonstrated by this scenario?

"A user receives an email with a link that, when clicked, installs software that records keystrokes."

medium

A. Ransomware

B. Phishing

C. Spyware

D. DoS attack

Solution

1. Step 1: Identify the threat from the scenario

   The software records keystrokes secretly, which is typical of spyware.

2. Step 2: Differentiate from other threats

   Phishing tricks for info, ransomware locks files, DoS overloads systems; none record keystrokes.

3. Final Answer:

   Spyware -> Option C

4. Quick Check:

   Software spying on keys = Spyware [OK]

Hint: Keylogger software = Spyware spying on user actions [OK]

Common Mistakes:

• Confusing phishing with spyware
• Thinking ransomware records keys
• Mixing DoS with spyware

4. A user reports their computer is slow and strange pop-ups appear. Which of these is the most likely cause?

Options:
A) Firewall misconfiguration
B) Spyware infection
C) Strong password use
D) Regular software updates

medium

A. Firewall misconfiguration

B. Spyware infection

C. Strong password use

D. Regular software updates

Solution

1. Step 1: Analyze symptoms of slowness and pop-ups

   Spyware often causes slow performance and unwanted pop-ups by running secretly.

2. Step 2: Rule out other options

   Firewall issues don't cause pop-ups, strong passwords and updates improve security, not cause problems.

3. Final Answer:

   Spyware infection -> Option B

4. Quick Check:

   Slow PC + pop-ups = Spyware [OK]

Hint: Pop-ups and slow PC usually mean spyware [OK]

Common Mistakes:

• Blaming firewall for pop-ups
• Thinking strong passwords cause issues
• Confusing updates with threats

5. A company wants to protect its data from being locked and held for ransom by attackers. Which cyber threat should they focus on preventing?

hard

A. Ransomware

B. Phishing

C. Spyware

D. DoS attack

Solution

1. Step 1: Understand ransomware's effect

   Ransomware encrypts data and demands payment to unlock it, threatening data access.

2. Step 2: Compare with other threats

   Phishing steals info, spyware spies, DoS disrupts service but doesn't lock data.

3. Final Answer:

   Ransomware -> Option A

4. Quick Check:

   Data locked for ransom = Ransomware [OK]

Hint: Ransomware locks files and demands payment [OK]

Common Mistakes:

• Confusing phishing with ransomware
• Thinking spyware locks data
• Mixing DoS with ransomware