Complete Guide: Threats, Malware & Social
Engineering
1. APT — Advanced Persistent Threat
An APT is a prolonged, targeted cyberattack where an intruder gains access to a network and stays
undetected for a long time.
1 Advanced — uses sophisticated techniques
2 Persistent — stays hidden for months or years
3 Threat — has a clear malicious goal (data theft, espionage, sabotage)
4 Who does it? Nation-states, organized cybercriminal groups
5 Famous examples: Stuxnet, APT28, APT41
6 Goal: Steal sensitive data, spy on organizations, or destroy infrastructure
2. Malware — What is it?
1 Malware = Malicious Software
2 Steals data
3 Damages files
4 Spies on users
5 Takes control of systems
6 Demands ransom
3. Types of Malware
1 Virus — Attaches to files and spreads
2 Worm — Self-replicates across networks
3 Trojan — Disguises as legitimate software
4 Ransomware — Encrypts files and demands payment
5 Spyware — Monitors user activity
6 Adware — Displays unwanted ads
7 Rootkit — Hides deep in OS
8 Keylogger — Records keystrokes
9 Botnet — Turns device into a zombie
10 Fileless Malware — Lives in RAM
4. Attacks Using Malware
1 Ransomware Attack
2 Data Breach
3 DDoS Attack
4 Man-in-the-Middle (MitM)
5 Credential Theft
6 Banking Fraud
7 Cryptojacking
8 Espionage/APT Attack
5. Malware Attack Lifecycle
1 Reconnaissance
2 Weaponization
3 Delivery
4 Exploitation
5 Installation
6 Command & Control (C2)
7 Actions on Objectives
6. Social Engineering Attacks
1 Phishing
2 Spear Phishing
3 Whaling
4 Vishing
5 Smishing
6 Pretexting
7 Baiting
8 Quid Pro Quo
9 Tailgating
7. Types of Payload
1 Data Exfiltration Payload
2 Destructive Payload
3 Ransomware Payload
4 Backdoor Payload
5 Downloader Payload
6 Remote Access Trojan (RAT)
7 Dropper Payload
8 Keylogger Payload
9 Botnet Payload
10 Cryptominer Payload