A cyber threat is anything that could harm a computer system, network, or the data stored on it by exploiting weaknesses in technology or human behaviour.
Cyber threats can result in data theft, financial loss, damaged systems, or disruption of services.

Malware is malicious software designed to infiltrate, damage, or gain unauthorised access to computer systems.
Malware is commonly spread through infected email attachments, compromised websites, or software downloads, where it can replicate, steal data, or damage systems.
Malware attacks are carried out for purposes such as financial gain, data theft, espionage, or disrupting operations.
Viruses attach to legitimate files or programs and spread when the infected file is opened or run, allowing them to corrupt, delete, or steal data.
Worms are self-replicating malware that spread across networks without attaching to another file, consuming resources and causing widespread damage.
Trojans disguise themselves as legitimate software to trick users into installing them, allowing attackers to steal data, gain control of systems, or install more malware.
Ransomware encrypts a user’s files and demands payment to restore access, although paying the ransom does not guarantee recovery.
Spyware secretly monitors user activity and collects sensitive information, such as passwords and banking details, which can be used for identity theft or fraud.

Social engineering manipulates people into revealing confidential information or carrying out actions that compromise security.
Common social engineering techniques include phishing, pretexting, baiting, and tailgating.
The aim of social engineering is to exploit human behaviour to gain unauthorised access to information or systems.

Brute-force attacks repeatedly try different username and password combinations until the correct one is found.
Automated software is used to perform large numbers of login attempts quickly.
Brute-force attacks are mainly used to gain unauthorised access to accounts protected by weak passwords.

A DoS attack overwhelms a system with traffic or requests, making it unavailable to legitimate users.
Attackers flood systems with excessive traffic or exploit vulnerabilities to consume resources.
The purpose of a DoS attack is to disrupt services, cause financial losses, or distract organisations while other attacks take place.

Data interception involves capturing sensitive information while it is being transmitted between devices.
Methods include packet sniffing, man-in-the-middle attacks, and data breaches.
The aim is to steal sensitive information for financial gain, identity theft, or corporate espionage.

SQL injection targets web applications by inserting malicious SQL commands into input fields to manipulate databases.
Attackers exploit vulnerable input fields to execute unintended database commands.
SQL injection can bypass authentication, access unauthorised information, modify data, or delete database contents.

Module Review