Cyber Security - Unit 3
TOOLS AND METHODS USED IN
CYBERCRIME
Introduction
Cybercrime:
• Cybercrime refers to illegal activities
that use computers or networks. It
includes attacks on data, systems, or
individuals, often for financial or
malicious purposes.
Proxy Servers and Anonymizers
• Proxy Server:
• Acts as an intermediary between the user's device and the
internet to hide identity, control access, or log usage.
• Types:
• Forward Proxy, Reverse Proxy, Transparent Proxy, and
Anonymous Proxy. Each serves different purposes in privacy
or monitoring.
• Anonymizers:
• Tools like VPNs, TOR, and web-based proxies that mask
users' IP addresses and browsing activity.
Phishing
• Phishing:
• A cyberattack that tricks users into giving away
confidential data through fake websites, emails, or
SMS.
• Types:
• Email Phishing, Spear Phishing, Whaling, Smishing
(SMS), Vishing (Voice Calls).
• Purpose:
• To steal credentials, financial data, or deliver malware.
Password Cracking
• Password Cracking:
• Method of gaining unauthorized access by breaking user passwords
using different techniques.
• Brute Force:
• Tries every possible combination until the correct password is found.
• Dictionary Attack:
• Uses a list of commonly used passwords to guess the correct one.
• Rainbow Table:
• Uses precomputed tables of hashes to reverse password hashes.
• Credential Stuffing:
• Uses previously leaked credentials to access other accounts.
• Keylogging & Phishing:
• Captures keystrokes or tricks users into revealing passwords.
Keyloggers and Spywares
• Keylogger: Software or hardware that records
keystrokes to steal credentials and sensitive info.
• Spyware:
• Malicious software that secretly collects and transmits
user data.
• Types:
• Includes adware, tracking cookies, stalkerware, trojans,
and system monitors.
• Prevention:
• Use anti-keylogger software, antivirus, secure form-
fillers, and voice input.
Virus and Worms
• Virus: Malware that attaches to files and
spreads when those files are executed by users.
• Worm: Self-replicating malware that spreads
automatically through networks without human
action.
• Effect: Both can slow systems, delete data, or
compromise security.
Trojan-horses and Backdoors
• Trojan Horse:
• Malware disguised as legitimate software.
Executes harmful actions once installed.
• Types:
• Downloader, Banker, Ransom, GameThief,
Dropper.
• Backdoors: Hidden paths for unauthorized
access. May be intentional or exploited
vulnerabilities.
Steganography
• Steganography: Hiding data inside other files
such as images, videos, or audio to conceal its
presence.
• Techniques: Image, Audio, Video, Text, and File
Steganography using LSB and other encoding
methods.
DoS and DDoS Attacks
• DoS Attack: Denial of Service: Single
system floods server with requests
making it unavailable.
• DDoS Attack: Distributed version using
multiple compromised systems (botnets)
to perform the attack.
SQL Injection
• SQL Injection: Attack that uses malicious
SQL queries to access, modify, or delete
data in a database.
• Types: Error-based, Union-based,
Boolean-based, Time-based, and Out-of-
band SQLi.
Buffer Overflow
• Buffer Overflow: Occurs when data exceeds a
buffer's memory limit, overwriting adjacent
memory.
• Attack: Can crash systems or allow attackers to
run malicious code.
• Types: Stack-based and Heap-based buffer
overflows.
Attacks on Wireless Networks
• Wireless Attacks: Exploiting weaknesses in Wi-Fi
or wireless protocols to intercept or disrupt
communication.
Examples:
• Eavesdropping, MITM attacks, evil twin attacks,
and WPA/WEP cracking.
Identity Theft (ID Theft)
• Identity Theft: Stealing personal data like SSN,
financial info, or IDs to commit fraud.
• Types: Medical, Financial, Criminal, Tax-related,
and Driver’s License ID Theft.
• Prevention: Use strong passwords, 2FA, don’t
overshare, secure devices, and verify sources.