Types of cyber attacks: a complete threat map

1Introduction

MITRE ATT&CK catalogues attacker tactics and techniques so defences can be built on real behaviour.

2Discussion

Malware: viruses, worms, trojans, spyware, keyloggers and ransomware.

Social engineering: phishing, spear phishing, business email compromise and vishing.

Application and infrastructure attacks: injection, XSS, man-in-the-middle, DDoS and credential stuffing.

APTs, supply-chain compromises and insider threats.

3Conclusion

Layered defence: MFA, patching, segmentation, offline backups, SOC monitoring and training.