Edexcel 1CP2 · Topic 4 · 4.1g

Cybersecurity
Threats

Malware · Phishing · Social Engineering · DoS · Man-in-the-Middle

CSZoneEdexcel GCSE Computer Science 1CP2

Malware Types

Malicious Software

Virus: self-replicating code that attaches to files; spreads when infected files are shared

Worm: self-replicating; spreads across networks without user action — exploits vulnerabilities

Trojan: disguised as legitimate software; installs malware when run

Ransomware: encrypts victim's files and demands payment for decryption key

Spyware: secretly monitors activity and sends data to attacker (keyloggers, screen capture)

Adware: displays unwanted adverts; often bundled with free software

Social Engineering Attacks

Exploiting People, Not Technology

Phishing: fraudulent emails or websites that mimic legitimate organisations to trick users into revealing passwords, card numbers, or personal data. "Your account will be suspended — click here."

Social engineering: manipulating people into revealing confidential information through psychological deception (pretexting, baiting, impersonation).

Brute force attack: systematically tries every possible password combination until the correct one is found

DoS & Man-in-the-Middle

Network Attacks

DoS (Denial of Service): overwhelms a server with traffic so legitimate users cannot access it. DDoS (Distributed DoS) uses many compromised devices (a botnet).

Man-in-the-Middle (MitM): attacker secretly intercepts and potentially alters communication between two parties — often on unsecured Wi-Fi. Used to steal login credentials or data.

Exam Practice

Have a go at this question

Edexcel-style question

Describe what is meant by a phishing attack and explain how it is different from a brute force attack.

4 marks

Phishing uses fake emails/websites to trick users into revealing personal data [1] — it exploits human psychology rather than technical weaknesses [1]. A brute force attack automatically tries every possible password combination [1] — it exploits weak passwords by systematic guessing, not deception [1].

Key Takeaways

What to Remember

Virus/Worm: self-replicating; Trojan: disguised; Ransomware: encrypts for ransom

Phishing: fake emails/sites; Social engineering: psychological manipulation

DoS/DDoS: flood server; MitM: intercept communications on unsecured networks

Brute force: tries all password combinations — defeated by strong/long passwords