4.4a Cyber Threats — Edexcel 1CP2

🔒

Unlock Pro

Subscribe to access all 59 Edexcel 1CP2 lessons.

£7.99/month

or £59/year

⭐ Enrichment lesson — this topic is not assessed in the Edexcel 1CP2 GCSE exam. It provides valuable extra knowledge but should not replace revision of the core specification.

Types of Malware

Malware (malicious software) is software designed to damage, disrupt, or gain unauthorised access to systems.

Type	Description	Example
Virus	Self-replicates by attaching to legitimate programs; spreads when files are shared	Infects an exe file; spreads to USB drives
Worm	Self-replicates and spreads across networks without needing to attach to a file	WannaCry exploited Windows network vulnerability
Trojan	Appears as legitimate software but secretly carries malicious code; does not self-replicate	A fake antivirus that installs spyware
Ransomware	Encrypts victim's files; demands payment (ransom) for decryption key	WannaCry 2017 — attacked NHS hospitals
Spyware	Secretly monitors and records user activity (keystrokes, passwords, browsing)	Keylogger recording banking credentials
Adware	Displays unwanted adverts; may collect browsing data	Pop-up ads appearing on websites

Social Engineering

Social engineering manipulates people (rather than systems) into revealing information or performing actions. It exploits human psychology — trust, fear, urgency.

Attack	Description
Phishing	Fraudulent emails pretending to be from a trusted source (e.g. a bank), tricking victims into clicking malicious links or revealing passwords
Spear phishing	Targeted phishing — personalised to a specific individual (uses their name, employer details)
Vishing	Voice phishing — fraudulent phone calls (e.g. "your bank account has been compromised")
Smishing	SMS/text message phishing (fraudulent texts with malicious links)
Pretexting	Fabricating a scenario to extract information (e.g. impersonating IT support)

Other Cyber Threats

Threat	Description
Brute force attack	Systematically trying every possible password combination until the correct one is found
Dictionary attack	Like brute force but uses a list of common words/passwords
SQL injection	Attacker inputs malicious SQL code into a web form to manipulate a database
DDoS attack	Distributed Denial of Service — flood a server with traffic from many devices (botnet) to make it unavailable to legitimate users
Man-in-the-middle	Attacker intercepts communication between two parties without their knowledge

Motivations for Cyber Attacks

Financial gain — steal banking details, demand ransomware payment, sell personal data
Espionage — government/corporate spying; steal intellectual property or state secrets
Disruption — damage infrastructure, take down services (hacktivism)
Personal grievance — disgruntled employees, targeted harassment
Notoriety — proving technical skill, "bragging rights"

Exam tip: Know the difference between types of malware. For 4-mark questions: name the threat → explain how it works → give an example → state impact. DDoS questions are popular — remember it uses a botnet to flood a server.

⚠️ Common Mistakes

Calling all malware "viruses" — virus, worm, and trojan are distinct types
Forgetting worms spread via networks (no file attachment needed), unlike viruses
Confusing phishing (email) with vishing (voice call) and smishing (SMS)

▶

Video coming soon

Click slide or press arrow keys to navigate

✍️ Worksheet — 4.4a Cyber Threats

8 questions · Malware, social engineering, DDoS

Q1Explain the difference between a virus and a worm.[3]

✅ Mark scheme

A virus attaches itself to a legitimate file/program and spreads when that file is shared or run [1]; a worm does not need to attach to a file — it spreads automatically across networks by exploiting vulnerabilities [1]; both self-replicate, but worms can spread without any user action [1].

Q2Describe a ransomware attack. Include how the attacker profits and one real-world example.[4]

✅ Mark scheme

Ransomware infects a computer and encrypts the victim's files, making them inaccessible [1]; the attacker demands a ransom payment (often in cryptocurrency) in exchange for the decryption key [1]; victims may lose all data if they refuse to pay or if the attacker doesn't provide the key [1]; example: WannaCry (2017) attacked NHS hospitals, encrypting patient records [1].

Q3What is a phishing attack? Describe how a typical phishing email works.[3]

✅ Mark scheme

Phishing is a social engineering attack using fraudulent emails [1]; the email appears to come from a trusted source (bank, PayPal, HMRC) and creates urgency (e.g. "your account will be suspended") [1]; victim clicks a link leading to a fake website and enters credentials — stolen by the attacker [1].

Q4Describe a DDoS attack and explain why it is difficult to defend against.[4]

✅ Mark scheme

DDoS (Distributed Denial of Service) — a botnet (many compromised devices) floods a server with requests simultaneously [2]; the server becomes overwhelmed and unable to respond to legitimate users — the service is unavailable [1]; difficult to defend: traffic comes from thousands of different IP addresses, making it hard to block without also blocking genuine users [1].

Q5State THREE motivations for carrying out a cyber attack.[3]

✅ Mark scheme

Any three: financial gain (theft, ransomware payment) [1]; espionage (stealing secrets, intellectual property) [1]; disruption/hacktivism (political protest, damaging infrastructure) [1]; personal grievance (revenge) [1]; notoriety (proving technical skill) [1].

Q6Explain the difference between a trojan and a worm.[3]

✅ Mark scheme

A trojan disguises itself as legitimate software [1] but contains hidden malicious code — it does NOT self-replicate [1]; a worm self-replicates and spreads automatically across networks without needing to disguise itself [1].

Q7What is 'social engineering'? Give TWO examples of social engineering attacks.[4]

✅ Mark scheme

Social engineering manipulates people (rather than technical vulnerabilities) into revealing information or performing actions [2]; any two examples: phishing (fraudulent emails) [1]; vishing (fraudulent phone calls) [1]; smishing (fraudulent SMS) [1]; pretexting (impersonating IT support) [1].

Q8Explain what a brute force attack is and how using a strong password helps prevent it.[3]

✅ Mark scheme

A brute force attack systematically tries every possible combination of characters until the correct password is found [2]; a longer, more complex password (mixing uppercase, lowercase, numbers, symbols) has vastly more combinations — making a brute force attack take an impractical amount of time [1].

Topic Quiz

Q 1 of 15

You scored

out of 15

Click to reveal definition

🎉

Session complete!

Term	Definition

Unlock Pro

Types of Malware

Social Engineering

Other Cyber Threats

Motivations for Cyber Attacks

✍️ Worksheet — 4.4a Cyber Threats

Mini Test — Cyber Threats