Which of the following does this scenario describe?
At just 15 years old, Michael Calce, a Canadian high school student using the online alias “Mafiaboy,” launched a series of Distributed Denial-of-Service (DDoS) attacks in February 2000 that temporarily crippled major websites, including Yahoo!, CNN, eBay, Amazon, and Dell.
Calce didn’t write the attack tools himself; instead, he used existing scripts and malware that he modified slightly and launched through a network of compromised computers. He referred to his actions as a way to gain notoriety and test his skills, but his attacks caused millions of dollars in damages and led to widespread media coverage and government investigations.
Which of the following does this scenario describe?
FIN7 is a sophisticated cybercrime group believed to operate primarily out of Eastern Europe. Between 2015 and 2018, the group orchestrated a large-scale campaign that targeted hundreds of U.S.-based companies—particularly in the retail, restaurant, and hospitality sectors.
They sent phishing emails disguised as legitimate business communications to employees. When opened, the emails installed malware that allowed the group to access internal systems and steal payment card data from point-of-sale (POS) terminals. The stolen data was then sold on underground forums or used to make fraudulent purchases.
Which of the following does this scenario describe?
In May 2017, a global ransomware attack known as WannaCry spread rapidly across networks in over 150 countries, encrypting files and demanding Bitcoin payments in exchange for decryption. The attack primarily exploited a known vulnerability in Microsoft Windows systems.
Cybersecurity experts and multiple government agencies, including the U.S. and U.K., attributed the attack to the Lazarus Group, a North Korea-linked hacking collective. WannaCry targeted hospitals, banks, transportation systems, and corporations — with particularly devastating effects on Britain’s National Health Service (NHS), where many systems were taken offline.
Which of the following does this scenario describe?
In early 2011, the cybersecurity firm HBGary Federal claimed it had infiltrated and identified members of an online activist group. In response, individuals associated with Anonymous launched a coordinated attack on the company.
They gained unauthorized access to HBGary’s servers, downloaded tens of thousands of internal emails, and defaced the company’s website. The leaked emails revealed controversial plans to discredit journalists and unions, sparking public backlash.
Which of the following does this scenario describe?
Greg Chung, a former Boeing engineer, spent nearly 30 years stealing sensitive aerospace documents and funneling them to the Chinese government. He secretly hoarded over 300,000 pages of documents related to U.S. military aircraft and space technology, including designs for the Space Shuttle and fighter jets.
Rather than using hacking tools, Chung exploited his trusted position inside the company to access classified materials, which he would then photocopy, store in his home, and covertly pass on. His activity went undetected for decades until a broader FBI investigation into industrial espionage revealed his actions.
Which of the following does this scenario describe?
In August 2012, a group calling itself “The Cutting Sword of Justice” launched a massive cyberattack against Saudi Aramco, the world’s largest oil company. The attackers used a malware called “Shamoon” to infiltrate the company’s systems and wiped data from approximately 30,000 computers, replacing it with an image of a burning American flag.
The group stated the attack was politically motivated — a retaliation against Saudi Arabia’s relationship with the United States and its actions in the Middle East.