L1 : Cyberattacks, Malwares, and Cyber Intruders

Cyber-attack

What is a deliberate and malicious attempt to breach the information system of an individual, organization, or government entity to steal, alter, or destroy data?

Financial Gain

What is the reason for a cyber-attack that involves stealing money, bank information, credit card information, or using ransomware for profit?

Political Motives

What is the reason for a cyber-attack involving protest, propaganda, or damaging the reputation of a government or organization?

Espionage

• What involves secretly entering the system of a company or country to steal trade secrets, technology, or sensitive national information?

• What are the motivations of cyber spies involving political, economic, military, or corporate gain?

To Disrupt Services

What is the purpose of an attack that aims to stop or paralyze the operation of a system or service?

Phishing

What is a cyber-attack where an attacker impersonates a legitimate entity to steal usernames, passwords, and credit card numbers through deceptive emails, fake websites, or instant messages?

Social Engineering

What is a type of manipulation that uses psychology to trick people into revealing passwords, PINs, OTPs, account numbers, or credit card details?

Distributed Denial-of-Service (DDoS)

What attack uses multiple compromised systems, often botnets, to flood a target server with massive amounts of traffic and make it unavailable to legitimate users?

Man-in-the-Middle (MitM) Attack

• What attack occurs when a cybercriminal intercepts communication between two parties to steal or manipulate information without either party knowing?

• What attack can occur when a user connects to an unsecured public Wi-Fi or fake hotspot controlled by an attacker?

Ransomware

What type of malware locks or encrypts a victim's data and demands a ransom to restore access?

SQL Injection

What attack exploits a vulnerability in a web application's software by inserting malicious SQL queries?

SQL

What stands for Structured Query Language and is used to communicate with a database?

Structured Query Language (SQL)

What language is used to search, add, edit, or delete data in a database?

Zero-Day Exploit

What exploit targets vulnerabilities that are unknown to the software developer and have no available patch or fix?

Stuxnet

• What sophisticated computer worm discovered in 2010 targeted industrial control systems associated with Iran's nuclear program and used zero-day vulnerabilities?

• What worm was designed to target Iran's nuclear program by exploiting multiple zero-day vulnerabilities?

Malware

What is short for malicious software and refers to programs or code designed to harm or exploit a programmable device, service, or network?

Computer Virus

What type of malware replicates by inserting its code into other programs or files on the host system?

ILOVEYOU Virus

What virus spread through email attachments in 2000 and caused over $10 billion in damages worldwide?

Worm

What malware can self-replicate without requiring user interaction or attaching to other files and often spreads through network or operating-system vulnerabilities?

Trojan / Trojan Horse

• What malware disguises itself as legitimate software and tricks users into downloading and executing it?

• What malware may appear as a harmless game but actually install spyware or ransomware?

Ransomware

What type of malware is designed to encrypt files or lock a system until a ransom is paid?

Adware

• What form of malware displays unwanted advertisements on a user's device?

• What malware may display excessive pop-up advertisements or redirect a user to unwanted websites?

Spyware

What malware secretly monitors activities such as keystrokes, browsing history, and login credentials?

Keylogger

What spyware program records every keystroke typed by a user and sends it to an attacker?

Rootkit

• What type of malware provides unauthorized access to a computer or network and operates at a low level in the operating system, making it difficult to detect?

• What type of malware can hide within an operating system to provide persistent access to an attacker?

Botnet

What is a network of computers infected with malware and controlled remotely by attackers?

Bots or Zombies

What are infected computers in a botnet also called?

Firewall

What cybersecurity measure acts as a barrier between trusted and untrusted networks to block malicious traffic?

Antivirus and Anti-malware Software

What cybersecurity measure detects and removes malware from devices?

Encryption

What cybersecurity measure protects sensitive data by converting it into unreadable code unless decrypted by an authorized user?

Intrusion Detection Systems (IDS)

What cybersecurity measure monitors network traffic for suspicious activity?

Regular Updates and Patching

What cybersecurity measure fixes vulnerabilities in software and operating systems to prevent exploits?

Security Awareness Training

What cybersecurity measure educates users about phishing, social engineering, and safe internet practices?

Backup and Recovery Plans

What cybersecurity measure ensures data can be restored after a ransomware attack or system failure?

Hackers

What are individuals or groups who use different methods to enter or interfere with computer systems, networks, or information?

Trolls

What cyber intruders engage in disruptive, provocative, or offensive behavior on social media, forums, and comment sections?

Trolls motivation

What are the common motivations of trolls, including boredom, malice, attention, entertainment, or political agendas?

Trolls' Methods

What methods of trolls include posting inflammatory or offensive content, personally attacking individuals or groups, and spreading misinformation?

Cyber Spies

What cyber intruders engage in espionage by secretly stealing sensitive or confidential information from individuals, businesses, or governments?

Cyber Spies' Methods

What methods may cyber spies use, including phishing, social engineering, spyware, zero-day vulnerabilities, and insider threats?

Advanced Persistent Threats (APTs)

What technique allows cyber spies to maintain long-term access to a target's systems without being detected?

Hackers

What are individuals or groups skilled in computer systems and programming who use their knowledge to break into networks or systems?

Black Hat Hackers

What type of hacker breaks into systems to steal, disrupt, or cause harm?

White Hat Hackers

What type of hacker uses skills to find and report vulnerabilities and help organizations strengthen security?

Gray Hat Hackers

What type of hacker falls between black hat and white hat and may exploit vulnerabilities without permission but usually does not intend to cause harm?

Hackers

What hackers may use techniques such as exploiting system vulnerabilities, phishing, brute-force attacks, SQL injections, and developing malware?

Cyber Thieves

What cyber intruders primarily aim to steal sensitive data, personal information, or financial resources for profit?

Financial Gain

What are the primary motivations of cyber thieves?

Cyber Thieves' Methods

What methods may cyber thieves use, including phishing, credit card fraud, ransomware attacks, keylogging, and malware infections?

Cybercrime

What is also called computer crime and involves using a computer as an instrument to commit illegal acts such as fraud, identity theft, or violation of privacy?

Republic Act No. 10175

What Philippine law is officially known as the Cybercrime Prevention Act of 2012 and is designed to combat and prevent crimes committed through computers and the internet?

The use of technology

What is the main difference between traditional crime and cybercrime?

Traditional Crime

What type of crime involves physically stealing someone's wallet rather than using a computer or the internet?

Cybercrime

What type of crime may involve stealing someone's bank account information or money through a computer or the internet?

Illegal Access

What is accessing a computer or application without permission?

Illegal Interception

• What is intercepting non-public communication of computer data to, from, or within a computer system by an unauthorized person?

• What involves secretly capturing, listening to, monitoring, or recording private computer communications while information is being transmitted?

Data Interference

What is unauthorized tampering with, destroying, deleting, or deteriorating computer data, electronic documents, or electronic data messages, including introducing or transmitting viruses? Examples include deleting accounting files, changing an invoice amount, or sending a virus that corrupts files.

System Interference

What is unauthorized interference with the operation of a computer or computer network, including damaging, deleting, deteriorating, altering, or suppressing computer data or programs? Examples include sending a virus that makes computers slow or stop working, deleting system files, or flooding a website/server so legitimate users cannot access it.

Misuse of Devices

What involves the unauthorized use, possession, production, sale, procurement, importation, distribution, or making available of gadgets, programs, or materials developed or adapted for committing cybercrime, including unauthorized use of computer passwords or access codes to commit an offense?

Cybersquatting

What is the acquisition of a domain name in bad faith to profit, deceive, harm reputation, or prevent others from registering it? Examples include using the domain name of a prominent brand or individual for these purposes.

Computer-related Forgery

What involves unauthorized input, alteration, or deletion of computer data that results in inauthentic data intended to be considered authentic for legal purposes? Examples include entering false information into a computer system, creating a fake electronic certificate, or changing an electronic record from ₱10,000 to ₱100,000 and presenting it as authentic.

Computer-related Fraud

What is any illegal act that uses computers, networks, or the internet to trick people or steal money, property, or private information?

Computer-related Identity Theft

What involves unauthorized acquisition, use, abuse, transfer, possession, change, or deletion of an individual's identifying information?

Cybersex

What involves willful engagement, maintenance, control, or operation of prohibited sexual activity or presentation through a computer system for favor or consideration?

Child Pornography

What involves unlawful or banned activities conducted through a computer system as defined and punished by Republic Act No. 9775?

Libel

What involves acts of defamation committed using a computer system or similar means under Article 355 of the Revised Penal Code?

Aiding or Abetting in the Commission of Cybercrime

What means knowingly assisting or abetting the conduct of any cybercrime offense covered by the law?

Attempt in the Commission of Cybercrime

What means willfully attempting to commit any of the cybercrime offenses enumerated under the Act, even if the crime was not successfully completed?

Corporate Liability