Threats

TYPE OF THREAT

DESCRIPTION

SQL Injection

An SQL injection attack involves executing malicious code through a vulnerable input. This code can manipulate the database, allowing attackers to extract sensitive information or even delete entire databases. SQL injections can be prevented by sanitising inputs, using prepared statements, and keeping database software up to date.

Cross-side-scripting attacks

Cross-Site Scripting (XSS) attacks are the manipulation of client-side code to execute malicious scripts or redirect users to another malicious website. This is commonly done through commands that are saved in a database and then displayed using innerHTML. When executed, these scripts can perform harmful actions such as stealing cookies, which may contain sensitive session data. To defend against this, you should enforce Cross-Site Request Forgery (CSRF) protection and sanitize both inputs and outputs to prevent malicious code from being stored or rendered.

Malware attacks

Malware attacks involve programs or code designed with the intent to harm your system or compromise your security. Malware can steal sensitive data, lock access to files (as seen in ransomware), and even damage your computer’s functionality. To prevent malware, it's important to use reliable antivirus software and provide training to help users identify potentially dangerous files and links.

Ransomware attack

Ransomware is a type of malicious software that locks or encrypts your files, effectively holding them hostage until a ransom is paid. Attackers typically demand payment in Bitcoin or other hard-to-trace currencies to restore access. The most effective defense against ransomware includes using reliable antivirus software, maintaining regular backups of important files, and staying educated about common threats, such as suspicious links, email attachments, and downloads that could be dangerous.

Spyware

Spyware is a type of malware that steals data, such as: passwords, bank info, personal info, images, documents. You never know you have spyware. As that’s the point. So make sure to run antivirus scans and watch out not to download dangerous files that could contain spyware or any other malware.

Adware

Adware itself tends to be a reasonably tame (Not always). It spams you with ads and slows down your computer. The major threat with adware is that it can link you to sites with more dangerous malware on it. Again adware can also be package with spyware. To defend against it, you should have a reliable antivirus and avoid dangerous links.

Phishing

Phishing is a psychological tactic used by attackers to trick individuals into revealing sensitive information such as passwords, financial details, or personal data. These attacks often come in the form of deceptive emails or messages, ranging from fake lottery wins to impersonations of trusted figures like your boss. To protect yourself, enable spam filters, verify suspicious communications by contacting official sources directly, and avoid clicking on unknown links or downloading unexpected attachments. Education and awareness are your strongest defenses against phishing attacks.