--- title: "Types of cyber attacks: the most common and underestimated ones" description: Do you know what are the most common and underestimated types of cyber attacks? Let's take a clear look at the subject. image: https://blog.cyberoo.com/hubfs/Types%20of%20cyber%20attacks%20Blog%20Cyberoo.png --- - Solutions Cyber Security Suite - [What is the Cyber Security Suite?](https://cyberoo.com/en/cyber-security-suite/) - [Cypeer – Internal Security](https://cyberoo.com/en/cypeer-managed-detection-and-response/) - [CSI – Cyber Threat Intelligence](https://cyberoo.com/en/cyber-threat-intelligence/) Cybersecurity Advisory - [Incident response](https://cyberoo.com/en/incident-response/) - [Risk Assessment](https://cyberoo.com/en/risk-assessment/) - [VA/PT](https://cyberoo.com/en/vulnerability-assessment-penetration-test/) - [Cyber Security Advisory & VCISO](https://cyberoo.com/en/cyber-security-advisory-vciso/) Titaan Suite - [Titaan Neemesi – GDPR compliance](https://cyberoo.com/en/titaan-neemesi-gdpr-compliance/) Security Awareness - [KEATRIX – Human Risk & Security Training Platform for Business](https://cyberoo.com/en/keatrix-security-awareness-platform-business/) - Corporate Cyberoo - [Company](https://cyberoo.com/en/cybersecurity-company/) - [Certifications](https://cyberoo.com/en/certifications/) - [People](https://cyberoo.com/en/people-in-cybersecurity/) - [Above The Rest](https://cyberoo.com/en/above-the-rest/) - [Jobs](https://cyberoo.com/en/jobs/) Investors - [Investors relations](https://cyberoo.com/en/investors-relations/) - [Sustainability](https://cyberoo.com/en/sustainability/) - Resources - [Cyber Blog](https://blog.cyberoo.com/en) - [Tech Blog](https://cert.cyberoo.com/en/) - [Press News](https://cyberoo.com/en/news-press/) - [Media Kit](https://cyberoo.com/en/media-kit/) [![Cyberoo](https://blog.cyberoo.com/hubfs/raw_assets/public/Cyberoo_May2023/images/CYBEROO-logo.svg)](https://cyberoo.com/en/) - [Contacts](https://cyberoo.com/contacts/) - [English](https://blog.cyberoo.com/en) - [Italiano](https://blog.cyberoo.com/) - [Français](https://cyberoo.com/fr/) - [Deutsch](https://cyberoo.com/de/) - [Polski](https://blog.cyberoo.com/pl) - [Español](https://cyberoo.com/es/) - Solutions - Cyber Security Suite - [What is the Cyber Security Suite?](https://cyberoo.com/en/cyber-security-suite/) - [Cypeer – Internal Security](https://cyberoo.com/en/cypeer-managed-detection-and-response/) - [CSI – Cyber Threat Intelligence](https://cyberoo.com/en/cyber-threat-intelligence/) - Cybersecurity Advisory - [Incident response](https://cyberoo.com/en/incident-response/) - [Risk Assessment](https://cyberoo.com/en/risk-assessment/) - [VA/PT](https://cyberoo.com/en/vulnerability-assessment-penetration-test/) - [Cyber Security Advisory & VCISO](https://cyberoo.com/en/cyber-security-advisory-vciso/) - Titaan Suite - [Titaan Neemesi – GDPR compliance](https://cyberoo.com/en/titaan-neemesi-gdpr-compliance/) - Security Awareness - [KEATRIX – Human Risk & Security Training Platform for Business](https://cyberoo.com/en/keatrix-security-awareness-platform-business/) - Corporate - Cyberoo - [Company](https://cyberoo.com/en/cybersecurity-company/) - [Certifications](https://cyberoo.com/en/certifications/) - [People](https://cyberoo.com/en/people-in-cybersecurity/) - [Above The Rest](https://cyberoo.com/en/above-the-rest/) - [Jobs](https://cyberoo.com/en/jobs/) - Investors - [Investors relations](https://cyberoo.com/en/investors-relations/) - [Sustainability](https://cyberoo.com/en/sustainability/) - Resources - [Cyber Blog](https://blog.cyberoo.com/en) - [Tech Blog](https://cert.cyberoo.com/en/) - [Press News](https://cyberoo.com/en/news-press/) - [Media Kit](https://cyberoo.com/en/media-kit/) - [Contacts](https://cyberoo.com/contacts/) - [English](https://blog.cyberoo.com/en) - [Italiano](https://blog.cyberoo.com/) - [Français](https://cyberoo.com/fr/) - [Deutsch](https://cyberoo.com/de/) - [Polski](https://blog.cyberoo.com/pl) - [Español](https://cyberoo.com/es/) - - - - - ![](https://blog.cyberoo.com/hubfs/Types%20of%20cyber%20attacks%20Blog%20Cyberoo.png) # Types of cyber attacks: the most common and underestimated ones Published by [cyberoo-admin](https://blog.cyberoo.com/en/author/cyberoo-admin) on 20 July 2021 Not everyone knows about the types of cyber attacks used to damage individuals and public or private organizations. Apart from their classification, which identifies their individual types, they have varying degrees of severity and consequences which make them more or less worrying. Unfortunately, nowadays there are no really harmless types of cyber attacks. In fact, the reasons that drive cyber criminals mainly fall within cybercrime and therefore focus on making huge profit from cyber attacks at their victims’ expense. If the damage then involves identity theft, the victim is affected twice: both personally and financially. Naturally, we are not talking about cyberterrorism types of attack, which aim to destabilize social order with much more wide-ranging consequences and serious related damage for the real world. Finally, the types of cyber attacks that can be attributed to hacktivism are mainly directed at companies and organizations for reasons of activism and protest, while targeted types of cyber attacks, i.e. ones directed at a specific victim, can strike for personal or lucrative reasons, but they might seem less frequent when compared with the first type of massive campaigns. Nevertheless, this category includes all types of cyber attacks against individual targets for personal reasons or by commission. But exactly what and which types of cyber attacks should we be focusing more on?   ## **Definition of cyber attacks** According to the [definition](https://niccs.us-cert.gov/about-niccs/glossary) by the National Initiative For Cybersecurity Careers And Studies (NICCS), an initiative by the Cybersecurity and Infrastructure Security Agency (CISA), a cyber attack is defined as an attempt to gain unauthorized access to system services, resources, or information, or an attempt to compromise system integrity, and more generally speaking, it involves the intentional act of attempting to bypass one or more security services or controls of an information system to alter the confidentiality, integrity and availability (CIA) of data. ## **The most common types of cyber attacks** According to the latest [Cyber Security Report 2020](https://pages.checkpoint.com/cyber-security-report-2020.html) published by Check Point, 28% of attacks worldwide involve malicious multipurpose botnets (computer networks infected by malware that can be used to launch a coordinated attack, DDoS, against a target), while the 20% increase in cases of incident response has been caused by a targeted ransomware attack (a type of malware that infects a PC and often blocks its data and functions, demanding money to resolve the problem). The malware scene is still dominated by cryptominers (malware that uses the victim’s computational resources to mine virtual coins) which affected 38% of companies in 2019. Mobile attacks seem to be slightly down from 2018, which were launched against 27% of global organizations in 2019. By extension, the types of cyber attacks known as Magecart inject harmful code into e-commerce websites to steal payment details and affected hundreds of websites in 2019, including hotel chains, commerce giants and SMEs. Finally, cloud cyber attacks are also increasing, which are mainly caused by incorrect configuration of in-cloud resources, but this is also due to the increase in attacks aimed directly at in-cloud service suppliers.   ## **Underestimated types of cyber attacks** Most underestimated types of attacks fall within the category of those carried out by email using Social Engineering techniques: phishing (a scam aimed at tricking the victim so they hand over their personal data and to use it fraudulently), CEO scams (emails to convince employees to transfer funds to bank accounts controlled by cyber criminals), spoofing (falsifying some of the sender’s data to trick the victim), Business Email Compromise types of cyber attacks, various account hijacking techniques and the sending of malicious attachments. These threats are very underestimated and all too often treated lightly with little attention and no prevention. Negligent users could also fall for brand phishing, where a fraudulent link is redirected to lead victims to a fake web page that looks like the official website of a well-known brand, but infects the visitor’s device to the cyber criminals’ benefit. You can protect yourself by increasing the awareness of staff through education and training, but also by adopting platforms that use Artificial Intelligence algorithms which can filter out most threats after an appropriate learning period. [Back to Blog](https://blog.cyberoo.com/en) - [Tweet](https://twitter.com/share) ## Related Articles ## [What are the most dangerous cyber threats of 2026?](https://blog.cyberoo.com/en/what-are-the-most-dangerous-cyber-threats-of-2026) In 2026, cyber threats are not only more sophisticated, but above all harder to detect. Compromised... [Read More](https://blog.cyberoo.com/en/what-are-the-most-dangerous-cyber-threats-of-2026) ## [3 top cybersecurity trends according to Gartner: the overview](https://blog.cyberoo.com/en/3-top-trend-in-cybersecurity-according-to-gartner) More than ever, companies are being called upon to radically change their approach to cybersecurity... [Read More](https://blog.cyberoo.com/en/3-top-trend-in-cybersecurity-according-to-gartner) ## [Cybersecurity 2026: AI Threats, Identity Risks, and Regulatory Changes](https://blog.cyberoo.com/en/cybersecurity-2026-ai-threats-identity-risks-and-regulatory-changes) 2026 marks a turning point in cybersecurity: threats are not only increasing in number, but also in... [Read More](https://blog.cyberoo.com/en/cybersecurity-2026-ai-threats-identity-risks-and-regulatory-changes) [![Cyberoo](https://blog.cyberoo.com/hubfs/raw_assets/public/Cyberoo_May2023/images/CYBEROO-logo.svg "Cyberoo")](https://blog.cyberoo.com/) **TRUSTED BY USERS** [![Capterra](https://blog.cyberoo.com/hubfs/raw_assets/public/Cyberoo_May2023/images/a0e3aa33abf348490d739e99e692012d.svg "Capterra")](https://www.capterra.com/reviews/206253/Cyber-Security-Suite?utm_source=vendor&utm_medium=badge&utm_campaign=capterra_reviews_badge) ![Gartner Peer](https://blog.cyberoo.com/hubfs/raw_assets/public/Cyberoo_May2023/images/GartnerPeerInsightsLogo-white.svg "Gartner Peer") - SERVICES - [CYPEER](https://cyberoo.com/en/managed-detection-and-response/) - [CSI](https://cyberoo.com/en/threat-intelligence/) - [INCIDENT RESPONSE](https://cyberoo.com/en/incident-response/) - [TITAAN NEEMESI](https://cyberoo.com/en/titaan-neemesi/) - [KEATRIX](https://cyberoo.com/en/keatrix-security-awareness-training/) - USEFUL LINKS - [WE ARE CYBEROO](https://cyberoo.com/en/company/) - [BLOG](https://blog.cyberoo.com/en) - [CONTACTS](https://cyberoo.com/en/contacts/) © 2026 Cyberoo. Registered Office: Via Brigata Reggio, 37 - 42124 Reggio Emilia (RE) - PEC amministrazione@pec.cyberoo.com Fully paid-up share capital € 1.035.432,35 Tax Code and VAT No. 04318950286 - R.E.A. RE 288453 [Privacy Policy](https://cyberoo.com/privacy-policy/) - [Privacy Policy - National Register of State Aids](https://www.rna.gov.it/RegistroNazionaleTrasparenza/faces/pages/TrasparenzaAiuto.jspx)- ISO27001 - - - ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "cyberoo-admin", "url" : "https://blog.cyberoo.com/en/author/cyberoo-admin" }, "dateModified" : "2024-03-11T11:11:34.514Z", "datePublished" : "2021-07-20T06:00:00.000Z", "headline" : "Types of cyber attacks: the most common and underestimated ones", "image" : [ "https://blog.cyberoo.com/hubfs/Types%20of%20cyber%20attacks%20Blog%20Cyberoo.png" ], "mainEntityOfPage" : { "@id" : "https://blog.cyberoo.com/en/types-of-cyber-attacks-here-are-the-most-common-and-underestimated-ones", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/vast.png" }, "name" : "Cyberoo" } } ``` ```json { "@context" : "https://schema.org", "@type" : "Article", "articleBody" : "Not everyone knows about the types of cyber attacks used to damage individuals and public or private organizations. Apart from their classification, which identifies their individual types, they have varying degrees of severity and consequences which make them more or less worrying. Unfortunately, nowadays there are no really harmless types of cyber attacks. In fact, the reasons that drive cyber criminals mainly fall within cybercrime and therefore focus on making huge profit from cyber attacks at their victims’ expense. If the damage then involves identity theft, the victim is affected twice: both personally and financially. Naturally, we are not talking about cyberterrorism types of attack, which aim to destabilize social order with much more wide-ranging consequences and serious related damage for the real world. Finally, the types of cyber attacks that can be attributed to hacktivism are mainly directed at companies and organizations for reasons of activism and protest, while targeted types of cyber attacks, i.e. ones directed at a specific victim, can strike for personal or lucrative reasons, but they might seem less frequent when compared with the first type of massive campaigns. Nevertheless, this category includes all types of cyber attacks against individual targets for personal reasons or by commission. But exactly what and which types of cyber attacks should we be focusing more on? Definition of cyber attacks According to the definition by the National Initiative For Cybersecurity Careers And Studies (NICCS), an initiative by the Cybersecurity and Infrastructure Security Agency (CISA), a cyber attack is defined as an attempt to gain unauthorized access to system services, resources, or information, or an attempt to compromise system integrity, and more generally speaking, it involves the intentional act of attempting to bypass one or more security services or controls of an information system to alter the confidentiality, integrity and availability (CIA) of data. The most common types of cyber attacks According to the latest Cyber Security Report 2020 published by Check Point, 28% of attacks worldwide involve malicious multipurpose botnets (computer networks infected by malware that can be used to launch a coordinated attack, DDoS, against a target), while the 20% increase in cases of incident response has been caused by a targeted ransomware attack (a type of malware that infects a PC and often blocks its data and functions, demanding money to resolve the problem). The malware scene is still dominated by cryptominers (malware that uses the victim’s computational resources to mine virtual coins) which affected 38% of companies in 2019. Mobile attacks seem to be slightly down from 2018, which were launched against 27% of global organizations in 2019. By extension, the types of cyber attacks known as Magecart inject harmful code into e-commerce websites to steal payment details and affected hundreds of websites in 2019, including hotel chains, commerce giants and SMEs. Finally, cloud cyber attacks are also increasing, which are mainly caused by incorrect configuration of in-cloud resources, but this is also due to the increase in attacks aimed directly at in-cloud service suppliers. Underestimated types of cyber attacks Most underestimated types of attacks fall within the category of those carried out by email using Social Engineering techniques: phishing (a scam aimed at tricking the victim so they hand over their personal data and to use it fraudulently), CEO scams (emails to convince employees to transfer funds to bank accounts controlled by cyber criminals), spoofing (falsifying some of the sender’s data to trick the victim), Business Email Compromise types of cyber attacks, various account hijacking techniques and the sending of malicious attachments. These threats are very underestimated and all too often treated lightly with little attention and no prevention. Negligent users could also fall for brand phishing, where a fraudulent link is redirected to lead victims to a fake web page that looks like the official website of a well-known brand, but infects the visitor’s device to the cyber criminals’ benefit. You can protect yourself by increasing the awareness of staff through education and training, but also by adopting platforms that use Artificial Intelligence algorithms which can filter out most threats after an appropriate learning period.", "author" : { "@type" : "Person", "name" : "cyberoo-admin", "sameAs" : [ "https://www.linkedin.com/company/cyberoo-italia" ], "url" : "https://blog.cyberoo.com/en/author/cyberoo-admin" }, "dateModified" : "1784109024065", "datePublished" : "2021-07-20 06:00:00", "description" : "Do you know what are the most common and underestimated types of cyber attacks? Let's take a clear look at the subject.", "editor" : { "@type" : "Person", "name" : "cyberoo-admin" }, "headline" : "Types of cyber attacks: the most common and underestimated ones", "image" : { "@type" : "ImageObject", "height" : 675, "url" : "https://content.cyberoo.com/hubfs/Types%20of%20cyber%20attacks%20Blog%20Cyberoo.png", "width" : 1200 }, "inLanguage" : "it-IT", "isAccessibleForFree" : true, "mainEntityOfPage" : { "@id" : "https://blog.cyberoo.com/en/types-of-cyber-attacks-here-are-the-most-common-and-underestimated-ones", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "" }, "name" : "Blog", "sameAs" : [ "https://www.linkedin.com/company/cyberoo-italia" ] }, "url" : "https://blog.cyberoo.com/en/types-of-cyber-attacks-here-are-the-most-common-and-underestimated-ones", "wordCount" : 690 } ```