Common Attack Vectors
An attack vector is the path or method an attacker uses to gain unauthorized access. Most breaches use one of a small handful of well-known vectors, understanding them is most of what it takes to defend against them.
Social engineering
The majority of breaches start by manipulating a person, not a machine:
- Phishing: fraudulent emails or messages that impersonate a trusted source to trick someone into clicking a link, entering credentials, or opening an attachment.
- Spear phishing: a targeted phishing attack aimed at a specific person, using details about them (their job title, a real coworker's name) to look convincing.
- Pretexting: inventing a false scenario ("I'm from IT, I need your password to fix an issue") to extract information.
Malware
| Type | What it does |
|---|---|
| Virus | Attaches to a legitimate file, spreads when that file runs |
| Worm | Spreads on its own across a network, no host file needed |
| Trojan | Disguised as legitimate software, opens a backdoor once installed |
| Ransomware | Encrypts a victim's files and demands payment for the key |
| Spyware | Silently collects information (keystrokes, browsing habits) |
Brute force and credential attacks
- Brute force: trying every possible password combination.
- Dictionary attack: trying common passwords or leaked password lists instead of every combination, far faster in practice.
- Credential stuffing: reusing username/password pairs leaked from one breach to try logging into other, unrelated services, this is why reusing passwords across sites is so dangerous.
WARNING
Credential stuffing works because people reuse passwords. A single breached, low-security forum can lead directly to a compromised email or bank account if the same password was reused.