Ransomware – Malware encrypting victim data and demanding payment for decryption keys.
Phishing – Deceptive emails or messages tricking users into revealing sensitive information.
DDoS Attack – Floods networks with traffic to overwhelm and disrupt services.
Malware – Malicious software including viruses, trojans, and worms that harm systems.
Data Breach – Unauthorized access and exposure of confidential information.
SQL Injection – Injects malicious code into database queries to manipulate data.
Cross-Site Scripting (XSS) – Injects harmful scripts into web pages viewed by others.
Man-in-the-Middle (MitM) – Intercepts communications to steal or alter data secretly.
Zero-Day Exploit – Attacks targeting unknown software vulnerabilities before patches.
Supply Chain Attack – Compromises trusted vendors to infiltrate target organizations.
Social Engineering – Manipulates people into divulging confidential information.
Spyware – Secretly monitors user activity, keystrokes, and data for theft.
Trojan Horse – Disguised malware granting attackers remote system access.
Rootkit – Hides malware and maintains persistent unauthorized access.
Keylogger – Records keystrokes to capture passwords and credentials.
Botnet – Network of infected devices used for coordinated attacks like DDoS.
Cryptojacking – Hijacks device resources to mine cryptocurrency secretly.
Insider Threat – Malicious actions by employees or insiders with legitimate access.
Business Email Compromise (BEC) – Impersonates executives to authorize fraudulent transfers.
Drive-By Download – Malware automatically installs when visiting compromised sites.
Fileless Malware – Attacks using legitimate system tools without files on disk.
Worm – Self-replicating malware spreading across networks autonomously.
Adware – Displays unwanted ads and tracks user behavior for profiling.
Watering Hole Attack – Compromises sites frequented by targets to infect visitors.
Logic Bomb – Malicious code triggered by specific conditions like dates.
AI-Powered Phishing – Machine learning crafts hyper-personalized deceptive messages.
Deepfake – AI-generated fake audio/video impersonating real individuals.
Deepfake Detection Evasion – Advanced fakes bypassing traditional verification.
AI Malware – Self-evolving malicious code adapting to defenses.
Prompt Injection – Manipulates AI models to execute unauthorized actions.
Generative AI Exploitation – Uses AI tools to automate attack creation.
Voice Phishing (Vishing) – AI-synthesized voices for fraudulent calls.
SMS Phishing (Smishing) – Deceptive texts leading to malware or data theft.
Quishing – QR code phishing directing to malicious sites.
Baiting – Lures victims with infected USB drives or media.
Pretexting – Creates fabricated scenarios to extract information.
Tailgating – Physical unauthorized entry by following authorized personnel.
Dumpster Diving – Retrieves discarded documents for sensitive data.
Shoulder Surfing – Observes screens or inputs to steal credentials.
Ransomware-as-a-Service (RaaS) – Subscription model for ransomware deployment.
Double Extortion – Encrypts data and threatens public leaks.
Triple Extortion – Adds DDoS threats to ransom and leaks.
Infostealer – Malware extracting credentials and financial data stealthily.
Credential Stuffing – Uses stolen logins across multiple sites.
Brute Force Attack – Automated password guessing attempts.
Dictionary Attack – Tries common passwords from word lists.
Rainbow Table Attack – Precomputed hashes for fast password cracking.
Pass-the-Hash – Uses stolen hash for lateral movement without passwords.
Golden Ticket Attack – Forges Kerberos tickets for domain dominance.
Silver Ticket Attack – Forges service tickets for targeted access.
Advanced Persistent Threat (APT) – Long-term targeted intrusions by nation-states.
Living off the Land (LotL) – Uses native tools to evade detection.
Malvertising – Malicious ads delivering payloads via legitimate sites.
SEO Poisoning – Manipulates search results to malicious pages.
OS Command Injection – Executes shell commands via input manipulation.
Code Injection – Embeds executable code in vulnerable applications.
XML External Entity (XXE) – Exploits XML parsers to access files.
Server-Side Request Forgery (SSRF) – Tricks servers into internal requests.
Insecure Direct Object Reference (IDOR) – Accesses unauthorized objects.
Broken Access Control – Bypasses authorization to restricted resources.
Cloud Misconfiguration – Exposed storage buckets or weak IAM policies.
API Exploitation – Attacks poorly secured application interfaces.
IoT Botnet – Hijacked devices launching massive attacks.
Mobile Malware – Threats targeting smartphones via apps or SMS.
OT/ICS Attack – Targets industrial control systems for disruption.
SCADA Attack – Exploits supervisory control systems in infrastructure.
Stuxnet – Worm targeting nuclear centrifuges via air-gapped systems.
Emotet – Banking trojan evolving into malware loader.
Ryuk Ransomware – Targets enterprises for high ransoms.
Conti Ransomware – RaaS group with data extortion tactics.
LockBit – Prolific RaaS exploiting Windows vulnerabilities.
REvil – Ransomware hitting critical infrastructure globally.
Maze – Pioneer of double extortion techniques.
Nation-State Cyberattack – Government-sponsored espionage or sabotage.
Cyber Espionage – Stealthy data theft for intelligence gathering.
Wiper Malware – Destroys data rather than encrypting for ransom.
Peer-to-Peer (P2P) Attacks – Uses P2P networks for malware spread.
DNS Tunneling – Encodes data in DNS queries to evade firewalls.
Domain Generation Algorithm (DGA) – Creates disposable command domains.
Fast Flux DNS – Rapidly changes DNS records to hide C2 servers.
Shadow IT – Unauthorized cloud services creating attack surfaces.
Third-Party Risk – Breaches via compromised vendors or libraries.
Firmware Attack – Malware embedded in hardware BIOS/UEFI.
Supply Chain Compromise – Tampered updates like SolarWinds.
Evil Twin Wi-Fi – Rogue access points mimicking legitimate ones.
KRACK Attack – Exploits WPA2 Wi-Fi handshake weaknesses.
BlueKeep – Wormable RCE in Windows RDP service.
PrintNightmare – RCE via Windows Print Spooler flaws.
Log4Shell – RCE vulnerability in Log4j library.
MOVEit Breach – SQLi exploiting file transfer software.
Change Healthcare Attack – Ransomware disrupting U.S. healthcare.
Colonial Pipeline Ransomware – Fuel supply chain shutdown.
JBS Meatpacking Attack – Global food supply disruption.
Quantum Computing Threat – Breaks current encryption algorithms.
Homomorphic Encryption Bypass – Attacks privacy-preserving computation.
5G Network Attack – Exploits high-speed mobile infrastructure.
Edge Computing Threat – Targets distributed processing nodes.
Satellite Cyberattack – Compromises space-based communications.
Undersea Cable Sabotage – Physical cuts to global internet backbones.

Cyber-Physical Attack – Blends digital hacks with physical damage.