A1 - Cyber Security Threats (External)

Question 1

External Threats

Answer 1

➡ An external threat refers to the risk of somebody from the outside of a company who attempts to exploit system vulnerabilities through the use of malicious software, hacking, sabotage or social engineering.

Question 2

Malicious software (malware)

Answer 2

➡ Malicious software encompasses a wide range of software, each of which has the purpose of causing damage to a computer system. Some are less harmful than others, for example, adware, meanwhile, others can render a hard drive inoperable,

Question 3

Spyware

Answer 3

➡ gathers information on the user it has infected, secretly sending it away to third-party sources – this may be through the use of keyloggers, which get information from what you type, such as passwords.

Question 4

Adware

Answer 4

➡ displays unwanted advertisements used to generate revenue, sometimes obstructing the user through the use of pop-ups that don’t disappear when you close them.

Question 5

Ransomeware

Answer 5

➡ prevents you from accessing your computer system, often by encrypting the storage devices, and demands a sum of money to be paid in order to gain access back.

Question 6

Viruses

Answer 6

➡ modify existing programs with malicious code and constantly replicates itself throughout a computer. They usually cause the corruption of data and applications, system failure & take up storage space or processing power.

Question 7

Worms

Answer 7

➡ Worms perform a similar function to viruses. However, worms can replicate themselves through a network to spread to other computers, rather than through infecting files that are spread. This allows them to perform similar functions to viruses but on a much larger scale

Question 8

Rootkits

Answer 8

➡ are used to get unauthorised remote administrator access to a computer or network. They typically spread by hiding in software that appears to offer legitimate functionality. This can then be used to steal data or hide other malware within the system.

Question 9

Trojans

Answer 9

➡ malicious code that hides within a seemingly legitimate program. Typically, users are misled and download the Trojan themselves by thinking it’s a program they would like to use.

Question 10

Hacking

Answer 10

➡ describes the exploitation of vulnerabilities in a computer system to gain unauthorized access to the system and its data. The method of attack is known as the “attack vector” and often involves exploiting vulnerabilities in areas like Wi-Fi, Bluetooth, the internet connection or through gaining internal network access.

Question 11

Individual Hacking motive

Answer 11

➡ Carried out the threat by an individual, due to making money, protest or revenge known as hacktivists

Question 12

Commercial Hacking motive

Answer 12

➡ When corporates attack their business competitors and rivals in order to gain intel and data about their plans

Question 13

Government Hacking motive

Answer 13

➡ Companies and governments will also hire others to hack themselves. So-called “white hat” hacking, which is used to detect system vulnerabilities so that they can prevent threats from malicious “black hat” hackers.

Question 14

Sabotage

Answer 14

➡ Sabotage is a general term that describes an activity used to deliberately disrupt services, through:

• Denial of service attack
• Distributing malware
• Physically destroy computer equipment

Question 15

Social Engineering

Answer 15

➡ Social engineering refers to the techniques used to deceive people into revealing private and confidential information. This can then be used for bank fraud & identity fraud or to gain access to systems.

Question 16

Operational Loss

Answer 16

➡ Operational losses refer to damages of the operating capability of an organisation. This includes a loss of:
- Manufacturing output
- Service availability
- Service data.

Question 17

Financial Loss

Answer 17

➡ Financial losses refer to damages to the wealth of an organization. This includes:
- Organizational losses
- Compensation
- Legal fees.

Question 18

Reputation Loss

Answer 18

➡ Reputation losses are the loss of trust and lowered opinion of a business due to threats such as lack of service, cybersecurity threats, or data theft. Customers may lose interest in a business due to concerns about availability, while businesses may not provide necessary data, leading to potential business relocation.

Question 19

Intellectual Property Loss

Answer 19

➡ Intellectual property losses occur when product designs or trade secrets are stolen, causing adverse effects on an organization. This can be done by competitors, corporate espionage, or individuals seeking to blackmail or release the organization, leading to financial and reputational losses.