Understand the main ways computer systems can be attacked: hacking, malware and social engineering. One small step before we move into phishing, brute force and network defences.
Every computer system contains something valuable: data, accounts, files, money, or access to a network.
A cyber security threat is anything that could damage, steal, disrupt or gain unauthorised access to that system.
Not every attack works the same way.
Some attacks try to break into a system. Some use harmful software. Some trick people into giving away information.
In this first cyber security lesson, we focus on three big threat ideas: hacking, malware and social engineering.
A burglar might force open a window. That is like hacking: gaining access without permission.
They might leave a harmful device inside the house. That is like malware: software designed to cause harm.
Or they might pretend to be someone trustworthy at the door. That is social engineering: tricking a person.
Hacking means gaining unauthorised access to a computer system.
The key word is unauthorised. The attacker does not have permission to access the system.
Malware is software designed to damage, disrupt, or gain unauthorised access to a computer system.
There are different types of malware. You do not need to know every detail here, but you should recognise common examples.
| Type | Simple idea |
|---|---|
| Virus | Attaches to files and can spread |
| Worm | Spreads across networks |
| Trojan horse | Disguises itself as legitimate software |
| Spyware / keylogger | Records or collects user data |
| Ransomware | Locks or encrypts files and demands payment |
Social engineering means manipulating or deceiving people to obtain confidential, personal or valuable data.
This is not mainly a technical attack. It uses trust, pressure, urgency or deception to make a person do something unsafe.
Cyber security becomes much easier when students separate the type of threat from the example.
Ask: is the attacker breaking in, using harmful software, or tricking a person?
| Threat | What it means |
|---|---|
| Hacking | Gaining unauthorised access |
| Malware | Harmful software |
| Social engineering | Manipulating people to obtain data |
Some students write anti-virus or anti-malware when asked for a type of malware.
That loses the mark. Anti-virus and anti-malware are security tools. They are defences, not attacks.
Students often know the idea of social engineering, but the answer is too casual for the exam.
Cyber security threats are actions or software that can damage systems, disrupt services, steal data or gain unauthorised access.
Hacking means unauthorised access. Malware means harmful software. Social engineering means manipulating people to obtain confidential or personal data.
The next lesson looks closely at two social engineering-style attacks students often confuse: phishing and pharming.
Now that you know the main threat categories, the next page compares phishing and pharming using two simple real-world examples.