28/01/2026
🚨 Most Common Cyber Attacks
Cyber attacks are attempts to steal data, disrupt systems, or gain unauthorized access. Knowing common types helps protect yourself and your organization.
1️⃣ Phishing & Social Engineering
What: Trick users into giving sensitive information.
Example: Fake email asking to “reset your password.”
Prevent: Verify links, awareness, use email filters.
2️⃣ Malware
What: Malicious programs that damage or spy on devices.
Example: Installing a trojan disguised as legitimate software.
Prevent: Use antivirus, update systems, avoid untrusted downloads.
3️⃣ Ransomware
What: Encrypts files and demands payment.
Example: Opening a malicious attachment that locks your documents.
Prevent: Regular backups, patching, limited admin access.
4️⃣ Password Attacks
What: Attempting to access accounts by guessing or reusing passwords.
Example: Logging in with stolen or reused credentials.
Prevent: Use strong, unique passwords and enable MFA.
5️⃣ Business Email Compromise (BEC)
What: Pretending to be executives to trick employees into sending money or sensitive data.
Example: An email “from the CEO” asking for an urgent payment.
Prevent: Verify requests, use email authentication, and train staff.
6️⃣ DDoS / DoS
What: Overwhelms systems to cause downtime.
Example: Website crashes due to massive fake traffic.
Prevent: DDoS protection, traffic filtering, redundant systems.
7️⃣ Vulnerability Exploitation
What: Exploiting software flaws to gain access.
Example: Unpatched server attacked via known flaw.
Prevent: Regular patching, scanning, intrusion detection.
8️⃣ Insider Threats
What: Employees accidentally or maliciously expose data.
Example: Sharing sensitive files outside the company.
Prevent: Least-privilege access, monitoring, policies.
🛡️ Cybersecurity is a habit that grows over time.
Stay alert. Stay safe. Stay updated.
— CyberSec Dad PH
