Essential Cybersecurity Terms: Phishing, Malware, Ransomware, and More

Tap a term to see what it means.

Phishing

A scam technique that impersonates a trusted organization or person to steal personal or financial information, most often carried out through email or text message.

Malware

A general term for any malicious software created to damage or disrupt a computer or smartphone.

Ransomware

Malware that encrypts a victim's files, making them unusable, and then demands payment in exchange for restoring access.

Firewall

A security system that protects an internal network or device from unauthorized outside access.

DDoS Attack

A distributed denial-of-service attack that overwhelms and disables a specific server or service by flooding it with traffic from many devices at once.

Encryption

A technique that protects information by converting data into a form that cannot be read without a designated key.

Zero-Day Vulnerability

A security flaw that even the software developer has not yet discovered, meaning no patch exists β€” if an attacker finds it first, the damage can be severe.

Spoofing

An attack technique that forges sender information to trick a target into believing a message comes from a trusted source.

Knowing the Basic Terms Helps You Spot Threats Early

Cyberattack techniques keep growing more sophisticated, but understanding the basic terms and principles goes a long way toward helping you notice a suspicious email or link before it's too late. Staying cautious of attachments or links from unclear sources is always the most fundamental line of defense.

Basic Precautions Go a Long Way

Using strong, unique passwords, keeping software updated, and enabling two-factor authentication where available are simple habits that meaningfully reduce your exposure to most common attack techniques.

Frequently Asked Questions

Do I have to pay if I get hit with ransomware?

Paying doesn't guarantee your files will actually be restored, and it can encourage further crime β€” consulting a security professional and keeping regular backups of important files beforehand is the most reliable form of prevention.

How can I tell if an email is phishing?

Be suspicious if the sender address is subtly different from an official domain, or if the message creates excessive urgency while asking for personal information or money.