Overview
Attacks come in a manageable number of recurring categories. Recognizing them lets you map almost any incident onto a familiar shape and choose the right defense. This lesson surveys the most common categories a beginner will meet again and again.
Learning objectives
- Name the major categories of attack.
- Give a concrete example of each.
- Connect each category to the CIA property it threatens.
Core concept
Frequently seen categories include:
- Malware — malicious software: viruses, worms, trojans, ransomware, spyware.
- Social engineering / phishing — manipulating people into revealing information or taking harmful actions.
- Credential attacks — password guessing, brute force, credential stuffing (reusing leaked passwords).
- Injection attacks — feeding malicious input into an application (e.g. SQL injection, command injection).
- Denial of Service (DoS/DDoS) — overwhelming a system so it cannot serve legitimate users.
- Man-in-the-middle (MITM) — intercepting or altering communications between two parties.
- Privilege escalation — turning limited access into higher access once inside.
How it works
Real intrusions usually chain categories: a phishing email (social engineering) delivers malware, which steals credentials (credential attack), which are used to escalate privileges and move deeper. Frameworks like MITRE ATT&CK organize these steps into tactics (the attacker's goal at each stage) and techniques (how they achieve it), giving defenders a shared vocabulary.
Practical example
A typical ransomware incident: an employee opens a phishing attachment → malware runs → it harvests stored credentials → the attacker uses them to reach file servers → they escalate privileges → finally they encrypt data (an availability attack) and demand payment. Each stage is a different category, and each offers a chance to detect and stop the chain.
Cybersecurity relevance
Every offensive and defensive module later maps back to these categories. Learning them now gives you a mental index: when you meet SQL injection in Web Security or brute forcing in Ethical Hacking, you already know the family it belongs to.
Common mistakes
- Thinking of attacks as single events rather than chains you can break at multiple points.
- Focusing only on technical categories and forgetting social engineering, which starts many breaches.
Key takeaways
- Most attacks fall into a small set of categories: malware, social engineering, credential attacks, injection, DoS, MITM, privilege escalation.
- Real intrusions chain several categories together.
- Each category threatens specific CIA properties and can be countered at multiple stages.
Check your understanding
- Which CIA property does a DDoS attack primarily threaten?
- Break a ransomware incident into at least three attack categories in the order they occur.