What is a 'computer virus' and how does it spread?

A type of malware that attaches itself to legitimate files and spreads when those files are shared or executed — it requires a host file and human action to propagate Any type of malware — 'virus' and 'malware' mean the same thing Software that damages your computer hardware by overloading the processor A program that monitors your keystrokes and sends them to attackers

What is a 'trojan horse' (trojan) in cybersecurity?

Malware disguised as legitimate or desirable software — users willingly install it thinking it's a game, tool, or utility, but it performs harmful actions in the background A virus that specifically targets the Trojan operating system An attack that bypasses firewalls using a decoy request Malware that deletes all files named after mythological characters

What is a 'worm' in cybersecurity?

Self-replicating malware that spreads across networks on its own, without needing to attach to files or require user action — it exploits vulnerabilities to jump between systems Malware that burrows into your operating system files and is hard to remove A slow-spreading virus that takes months to show visible damage Software that gradually degrades system performance over time

What is a 'DDoS attack' (Distributed Denial of Service)?

Overwhelming a server or network with massive amounts of traffic from thousands of compromised computers simultaneously, making the target unavailable to legitimate users Hacking into a computer by trying millions of different passwords automatically An attack that deletes data from distributed database systems Installing spyware on multiple devices across different locations

What is a 'botnet'?

A network of computers secretly infected with malware and controlled remotely by an attacker — used for spam, DDoS attacks, cryptocurrency mining, or spreading more malware A network of robots used to test websites for security vulnerabilities Automated chat programs (bots) used for customer service on websites A group of hackers working together to coordinate attacks

What is a 'SQL injection' attack?

An attack where malicious SQL code is inserted into input fields of a website to manipulate the database — potentially stealing, deleting, or modifying data An attack that injects fake SQL servers into a network to intercept database queries Installing an unauthorized SQL database on a company's server Overloading a database server by running too many queries simultaneously

What is a 'man-in-the-middle' (MITM) attack?

An attack where the attacker secretly intercepts and potentially alters communication between two parties who believe they're communicating directly with each other An attack where two hackers work together to breach a system simultaneously from different angles When a malicious website places itself between your search result and the real site An attack where hackers intercept physical mail containing account information

What is a 'zero-day vulnerability'?

A software vulnerability that is unknown to the software vendor and has no patch available — attackers can exploit it freely until it's discovered and fixed A vulnerability that allows attackers to reset a system to its factory settings A security flaw that only exists on the day software is first released An attack that happens so quickly it takes zero days to complete

What is 'ransomware' and how do organizations protect against it?

Malware that encrypts files and demands payment for the decryption key — organizations protect themselves with offline backups, network segmentation, and user training A type of spyware that monitors your activity and threatens to reveal it publicly Malware that locks your screen and demands you call a fake tech support number An attack where criminals steal your identity and demand payment to restore it

What is 'social engineering' and why is it often more effective than technical attacks?

Manipulating people to bypass security measures — it's effective because human psychology (trust, authority, urgency, helpfulness) can be exploited even when technology is perfectly secured Using social networks to spread malware — it's effective because billions of people use social media Bribing employees with money or gifts to reveal company secrets Studying an organization's social events to identify when security is lowest