ZEKASTRA Cyber
Threat profiles
Each profile follows the same order: what the threat is, how it works, what to look for, what to do about it. They describe attacks at the level a defender needs and contain no instructions for carrying them out.
Targeting people
Phishing
A message that imitates a bank, an agency or a colleague to get you to open a link, enter a password or approve a payment.
Social engineering and payment fraud
Manipulating people rather than systems: a fake executive, supplier or support agent persuades someone to move money or reveal access.
Accounts and access
Software and web
Malware
Software built to steal data, take control of a device or damage it: infostealers, trojans, spyware, worms and loaders.
Ransomware
Malware that encrypts files and demands payment, often after the attacker has also copied the data.
Injection (SQL and command)
Untrusted input is treated as part of a query or command, so the application runs something its developer never intended.
Cross-site scripting (XSS)
A page includes attacker-controlled content as active code, so it runs in the visitor's browser with the site's permissions.
Broken access control
The application checks who you are but not what you may do, so one user can reach another user's data or functions.
Infrastructure and supply
Denial of service (DoS and DDoS)
Overwhelming a service or its network link so legitimate users cannot reach it.
Interception (man-in-the-middle)
An attacker sits between you and a service and reads or alters what passes, typically on an untrusted network.
Software supply-chain compromise
Malicious code reaches you through something you trust: a library, an update, a build tool or a vendor.
Misconfiguration and exposed services
A correct product set up unsafely: a public storage bucket, a database open to the internet, a default password, a debug page left on.
Unpatched vulnerabilities
A known flaw in software for which a fix exists but has not been applied.
This section is for defence and learning. Do not test systems you do not own or have written permission to test: unlawful access to an information system is an offence (Turkish Penal Code, Article 243).