cyber.hendryadrian.com
Interesting Stuff · huntress.com

36 Common Cyberattacks: How They Work and How to Reduce Risk

· Original article ↗

Summary

A cybersecurity guide explains 36 attack types, including malware, phishing, network attacks, and vulnerability exploitation, and recommends measures such as MFA, patching, employee training, and backups.

Key points

  • The guide groups attacks into malware-based, phishing and social engineering, network, and vulnerability exploitation categories.
  • Examples include ransomware, infostealers, phishing, DDoS, SQL injection, credential stuffing, insider threats, and supply chain attacks.
  • The article cites a June 2025 survey in which 54% of more than 500 US IT professionals reported a malware attack and 44% reported phishing or spearphishing in the prior 12 months.
  • Recommended defenses include employee training, strong unique passwords and MFA, timely patching, firewalls and intrusion detection, secure backups, and endpoint protection.
  • The article also recommends cyber insurance and promotes Huntress managed EDR.

Article Details

Topic
An educational overview of common cyberattack types, how they work, and basic prevention measures.

MITRE ATT&CK

T1056.001 · KeyloggingDescribes keyloggers recording users' keystrokes to capture sensitive information.T1110.003 · Password SprayingDescribes password spraying using a small set of common passwords across many accounts.T1110.004 · Credential StuffingDescribes credential stuffing using stolen credentials against accounts on multiple websites.T1189 · Drive-by CompromiseDescribes watering-hole attacks in which a frequently visited website is compromised to target its visitors.T1190 · Exploit Public-Facing ApplicationDescribes SQL injection against web applications to access or manipulate data.T1195.002 · Compromise Software Supply ChainDescribes supply-chain attacks that compromise software or updates distributed through a trusted vendor.T1486 · Data Encrypted for ImpactDescribes ransomware encrypting victims' files to disrupt operations and demand payment.T1498 · Network Denial of ServiceDescribes denial-of-service attacks that flood a target with traffic to make it unavailable.T1557.002 · ARP Cache PoisoningDescribes ARP spoofing that poisons ARP caches to redirect network traffic through an attacker.T1566 · PhishingDescribes phishing and spearphishing messages used to trick victims into opening links or attachments.

Related Articles