2.3. Real-World Examples

Threat Type: Ransomware Incident: WannaCry (2017) Outcome: $4 billion in damages globally

The WannaCry ransomware attack occurred in 2017 and is a notable example of a cyber threat. Ransomware is a type of malicious software that encrypts files on a victim's computer, making them inaccessible unless a ransom is paid. In this case, WannaCry infected hundreds of thousands of computers worldwide. It was particularly dangerous because it exploited a vulnerability in Windows operating systems that had not been patched by many users. The consequences were significant, resulting in an estimated $4 billion in damages globally, affecting businesses, individuals, and critical services like hospitals.

Think of ransomware like a burglar who breaks into your house, locks all your valuables in a safe, and then demands money to give you the key. If you refuse to pay, not only do you lose access to your belongings, but the longer you wait, the more desperate your situation becomes as your possessions remain locked away.

Threat Type: Phishing Incident: Google Docs phishing scam (2017) Outcome: Millions tricked into giving access

In 2017, a widespread phishing scam involving Google Docs caught millions of users off guard. Phishing is a technique where attackers trick individuals into divulging confidential information by mimicking trustworthy entities. In this incident, users received emails that appeared to be legitimate invitations to collaborate on Google Docs. However, clicking on the link would lead to a fake login page, where users unknowingly provided their login credentials to the attackers. This incident highlighted the dangers of phishing, as it successfully deceived large numbers of people.

Imagine receiving a letter from a company you trust, asking you to verify your account by providing sensitive details. You might think it's legitimate and comply, but instead, you're actually sending your information directly to a scammer. Just like in this phishing incident, where users were misled into thinking they were interacting with Google.

Threat Type: DDoS Incident: Dyn Cyberattack (2016) Outcome: Major internet platforms taken down

The Dyn cyberattack in 2016 is a significant example of a Distributed Denial of Service (DDoS) attack. DDoS attacks involve overwhelming a service with a flood of traffic from many sources, rendering the service unavailable to legitimate users. The attackers targeted Dyn, a major Internet Domain Name System (DNS) provider, causing widespread disruptions in internet services. As a result, popular platforms like Twitter, Netflix, and Reddit experienced downtime, illustrating the potential scale and impact of DDoS attacks.

Think of a DDoS attack like a traffic jam caused by thousands of cars trying to enter a single highway all at once. Instead of moving smoothly, the road becomes congested and impassable for regular vehicles. Similarly, the DDoS attack swamped Dyn with excessive requests, blocking genuine users from accessing important services.

Threat Type: SQL Injection Incident: Heartland Payment Systems (2008) Outcome: 130M credit cards compromised

The Heartland Payment Systems incident in 2008 exemplifies the dangers of SQL injection attacks. SQL injection exploits vulnerabilities in an application’s database queries by injecting malicious SQL commands. Attackers gained unauthorized access to Heartland's systems and compromised about 130 million credit card transactions. This incident underscores the importance of secure coding practices to protect sensitive customer data from such vulnerabilities.

You can think of SQL injection like someone slipping a false order into a restaurant's order system. Instead of a legitimate order for food, they introduce a request to send out sensitive customer information. Just as the restaurant staff might unknowingly comply, the vulnerable database processes the harmful command and lets attackers access valuable data.

--