CA Module 1

Module 1: The Danger
Instructor Materials
CyberOps Associate v1.0

Module 1: The Danger
CyberOps Associate v1.0

Module Objectives
Module Title: The Danger
Module Objective: Explain why networks and data are attacked.
Topic Title Topic Objective

War Stories Explain why networks and data are attacked.
Threat Actors Explain the motivations of the threat actors behind specific security incidents.
Threat Impact Explain the potential impact of network security attacks.
© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9
1.1 War Stories
The Danger
Hijacked People
• Hackers can set up open “rogue”
wireless hotspots posing as a genuine
wireless network.
• Rogue wireless hotspots are also known
as “evil twin” hotspots.
The Danger
Ransomed Companies
• Employees of an organization are often lured
into opening attachments that install
ransomware on the employees’ computers.
• This ransomware, when installed, begins the
process of gathering and encrypting
corporate data.
• The goal of the attackers is financial gain,
because they hold the company’s data for
ransom until they are paid.
The Danger
Targeted Nations
• Some of today’s malware is so sophisticated
and expensive to create that security
experts believe only a nation state or group
of nations could possibly have the influence
and funding to create it.
• Such malware can be targeted to attack a
nation’s vulnerable infrastructure, such as
the water system or power grid.
• One such malware was the Stuxnet worm
that infected USB drives and infiltrated
Windows operating systems. It then
targeted Step 7 software that was
developed by Siemens for their
Programmable Logic Controllers (PLCs).
The Danger
Video - Anatomy of an Attack
Watch this video to view details of a complex attack.
The Danger
Lab - Installing the Virtual Machine
In this lab, you will complete the following objectives:
• Install VirtualBox on your personal computer
• Download and install the CyberOps Workstation Virtual Machine (VM).
The Danger
Lab - Cybersecurity Case Studies
In this lab, you will analyze the given cases and answer questions about them.
1.2 Threat Actors
Threat Actors
Threat Actors
• Threat actors are individuals or groups of individuals who perform
cyberattacks. They include, but are not limited to:
• Amateurs
• Hacktivists
• Organized crime groups
• State-sponsored groups
• Terrorist groups
• Cyberattacks are intentional malicious acts meant to negatively
impact another individual or organization.
Threat Actors
Threat Actors (Contd.)
Amateurs Hacktivists Financial Gain Trade Secrets and

• They are also known • These are hackers who • Much of the hacking Global Politics
as script kiddies and publicly protest against activity that • At times, nation states
have little or no skill. a variety of political and consistently threatens hack other countries, or
• They often use social ideas. our security is interfere with their
existing tools or • They post articles and motivated by financial internal politics.
instructions found on videos, leaking gain. • Often, they may be
the internet to launch sensitive information, • Cybercriminals want to interested in using
attacks. and disrupting web gain access to bank cyberspace for
• Even though they services with accounts, personal industrial espionage.
use basic tools, the illegitimate traffic in data, and anything else • The theft of intellectual
results can still be Distributed Denial of they can leverage to property can give a
devastating. Service (DDoS) generate cash flow. country a significant
attacks. advantage in
international trade.
Threat Actors
How Secure is the Internet of Things?
• The Internet of Things (IoT) helps individuals
connect things to improve their quality of life.
• Many devices on the internet are not updated with
the latest firmware. Some older devices were not
even developed to be updated with patches. These
two situations create opportunity for threat actors
and security risks for the owners of these devices.
Threat Actors
Lab - Learning the Details of Attacks
In this lab, you will research and analyze IoT application vulnerabilities.
1.3 Threat Impact
Threat Impact
PII, PHI, and PSI
• Personally Identifiable Information (PII) is any information
that can be used to positively identify an individual, for example,
name, social security number, birthdate, credit card numbers etc.
• Cybercriminals aim to obtain these lists of PII that can then be
sold on the dark web. Stolen PII can be used to create fake
financial accounts, such as credit cards and short-term loans.
• The medical community creates and maintains Electronic
Medical Records (EMRs) that contain Protected Health
Information (PHI), a subset of PII.
• Personal Security Information (PSI), another type of PII, includes
usernames, passwords, and other security-related information
that individuals use to access information or services on the
network.
Threat Impact
Lost Competitive Advantage
• The loss of intellectual property to competitors is a serious concern.
• An additional major concern is the loss of trust that comes when a company is unable
to protect its customers’ personal data.
• The loss of competitive advantage may come from this loss of trust rather than
another company or country stealing trade secrets.
Threat Impact
Politics and National Security
• It is not just businesses that get hacked.
• State-supported hacker warriors can cause disruption and destruction of vital services
and resources within an enemy nation.
• The internet has become essential as a medium for commercial and financial
activities. Disruption of these activities can devastate a nation’s economy.
Threat Impact
Lab - Visualizing the Black Hats
In this lab, you will research and analyze cybersecurity incidents to create scenarios
highlighting how organizations can prevent or mitigate an attack.
1.4 The Danger Summary
The Danger Summary
What Did I Learn in this Module?
• Threat actors can hijack banking sessions and other personal information by using “evil
twin” hotspots.
• Threat actors include, but are not limited to, amateurs, hacktivists, organized crime groups,
state sponsored, and terrorist groups.
• As the Internet of Things (IoT) expands, webcams, routers, and other devices in our homes
are also under attack.
• Personally Identifiable Information (PII) is any information that can be used to positively
identify an individual.
• The medical community creates and maintains Electronic Medical Records (EMRs) that
contain Protected Health Information (PHI), a subset of PII.
• Personal Security Information (PSI) includes usernames, passwords, and other security-
related information that individuals use to access information or services on the network.

CA Module 1

Uploaded by

Copyright:

Available Formats

CA Module 1

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CA Module 1

Uploaded by

Copyright:

Available Formats

Module 1: The Danger

CyberOps Associate v1.0

CyberOps Associate v1.0

Module Objective: Explain why networks and data are attacked.

Topic Title Topic Objective

• Download and install the CyberOps Workstation Virtual Machine (VM).

Amateurs Hacktivists Financial Gain Trade Secrets and

You might also like