An attack is any attempt to break into, disrupt, or damage a system. The motivation varies. Money drives most of it. Ransomware, business email compromise, and card skimming all convert access into cash. Espionage, activism, and simple curiosity cover the rest. The technique matters less than the outcome. If someone gains access they should not have, it counts.

Attacks come in phases. Reconnaissance gathers information about the target. Weaponization builds the tool. Delivery sends it, often by phishing email or a compromised website. Exploitation triggers the vulnerability. Installation plants persistent access. Command and control opens a channel to the attacker. Actions on objectives carry out the goal, whether that is exfiltration, encryption, or sabotage. Defenders who understand the chain can break it at any link. Blocking the phishing email stops the attack before exploitation. Monitoring outbound traffic catches command-and-control beacons after installation. No single control stops everything. Layered defenses buy time.

Common attack categories

• Network — exploiting exposed services and protocols
• Social engineering — manipulating people into helping
• Supply chain — compromising trusted software or vendors
• Insider — abuse of legitimate access by an employee or contractor

Most successful attacks are not technically brilliant. They exploit unpatched systems, reused passwords, and people in a hurry.