Hackers sometimes deploy sophisticated cybersecurity attacks to gain access to high-value targets that can be worth millions.
DoS or DDoS Attack — Characteristically a brute force assault, Denial of Service (DoS) attacks aim at reducing or crippling the servers and services under attack, while Distributed Denial of Service (DDoS) attack uses multiple computers at the same time to each launch DoS attacks against a target or set of targets for a multiplier effect. These attacks are perpetrated for several reasons, the least of which is to cause annoyance. More resolute hackers have found that DoS attacks can open up opportunities to penetrate the target in other ways, gaining access to sensitive, valued data. When they’re large enough, these kinds of attacks can have dramatic financial and political ramifications. DoS attacks are brute force strategies requiring resources to sustain until the system under attack collapses.
Man-in-the-Middle (MitM) Attack — Man-in-the-Middle attacks are sly methods by hackers to step in-between client and server communications and obtain controls reserved for trusted entities. Hackers can use session hijacking to obtain a client’s IP address after it has initiated a session with a server (the hacker had previously infiltrated the client via malware or other methods), and then quickly assume the client IP and controls, and then simply discarding the client, ultimately gaining access to the server. IP spoofing also attempts to gain access—instead of infiltrating a client, the hacker simply sends an access request with a fake IP address in hopes that it will be granted. Another similar method is replay attacks, a hacker will attempt to impersonate a trusted system by sending older, intercepted messages. MitM attacks are sophisticated, and require the use of multiple technologies to triangulate vulnerabilities.
Phishing Attack — Phishing attacks are attempts on users rather than systems by impersonating trusted sources to coax sensitive information out of a person. A common method is email impersonation—a hacker will send a legitimate-looking email asking to follow a link to a seemingly reputable website, and in the process capture sensitive information or load malware. Hackers won’t stop there if the data to be captured is valuable enough. Even more, targeted is spear phishing, where hackers perform due diligence on their mark to create a stronger illusion of credibility. The target may receive emails with doctored headers that look real and be presented with fully functional websites that represent reputable brands. Phishing attacks rely on social psychology and technology, making them very sophisticated and difficult to automate.
Malware Attack — Malware, or malicious software, is software, non-consentingly installed on computer systems, that perform malicious tasks by stealing data, replicating, propagating, hiding, lurking, or destroying files. Malware encompasses many feared agents: Trojans, Worms, Macro Viruses, File Infectors, Boot Record Infectors, Polymorphic Viruses, Stealth Viruses, Logic Bombs, Droppers, and Ransomware. In combination with other attacks, malware is used to steal passwords, data, and wreak havoc on systems, some of the most notorious malwares have been very small in size belying their impact, like the Sasser worm, only 15.8 KB, causing an estimated $18.1 billion in damages.