CYBERSECURITY PART 1 MODULE 3

Vocabulary flashcards covering security threats, malware classifications, and social engineering tactics based on the Cybersecurity Module 3 lecture transcript.

Security Threat

Any potential danger that can exploit a vulnerability to compromise the confidentiality, integrity, or availability of an information system.

Security Vulnerability

A weakness in a system, software, or network that can be exploited, often compared to a small crack in a wall.

Malware

Malicious software specifically designed to damage, disrupt, or gain unauthorized access to computer systems.

Virus

A type of malware that attaches itself to a file or program and becomes active when the infected file or program is executed; it typically requires user action to spread.

ILOVEYOU (2000)

A popular example of a virus mentioned in the lecture alongside Melissa (1999) and Michelangelo (1991).

Worm

A self-replicating type of malware that can make copies of itself and spread across networks automatically without user action or a host file.

SQL Slammer (2003)

A famous example of a worm that spread so quickly it took down parts of the internet within minutes.

Trojan

Malware that pretends to be useful or legitimate (such as a free game or security tool) but does not self-replicate and relies on tricking the user into running it.

Zeus

A popular example of a Trojan mentioned alongside Emotet and Back Orifice (1998).

Ransomware

Malware that encrypts files and locks users out of their data, demanding a ransom (usually in cryptocurrency) for a decryption key.

WannaCry (2017)

A massive ransomware attack that affected hundreds of thousands of systems worldwide.

Spyware

Malware that secretly monitors user activity and collects personal data, such as browser history or emails, without the user's knowledge.

Keyloggers

An example of spyware that can record everything typed, including passwords and credit card numbers.

Adware

Software that primarily displays unwanted ads and pop-ups, often bundled with free applications to track browsing habits.

Social Engineering

The practice of targeting people by manipulating human psychology to trick individuals into giving away confidential information or granting unauthorized access.

Phishing

The use of deceptive emails or websites impersonating legitimate organizations to steal login credentials or credit card details.

Spear Phishing

A highly targeted form of phishing that focuses on specific individuals or organizations by using researched details like job titles or colleague names.

Pretexting

A social engineering tactic where an attacker creates a fake scenario, such as impersonating IT support or HR, to manipulate someone into giving away information.

Baiting

A tactic involving an enticing offer, like free music downloads or a USB drive left in a public place, to trick a victim into a malware infection.

Tailgating

A physical security threat where an attacker gains access to a restricted area by following another person who is authorized to enter.