A ransomware worm that spread rapidly in 2017, encrypting hundreds of thousands of computers worldwide. It exploited a vulnerability in Microsoft Windows.

The Colonial Pipeline, a major US fuel pipeline, was shut down due to an attack. The attackers, DarkSide, demanded and received a ransom payment.

A user receives an email that appears to be from their bank, warning of suspicious activity on their account. The email contains a link to a fake website that looks identical to the bank's site, where the user is prompted to enter their login credentials. The attacker then steals this information.

An email claims a package could not be delivered and asks the recipient to click a link to update their address. The link leads to a malicious website that installs malware.

An attacker leaves a USB drive labeled 'Confidential HR Files' in a common area. A curious employee plugs the drive into their computer, unwittingly installing malware.

A sophisticated computer worm discovered in 2010 that targeted Iran's nuclear facilities. It damaged centrifuges and disrupted the country's nuclear program.

During the pandemic, many emails impersonated different health organizations, offering early access to vaccines in exchange for personal information.

JBS Foods, the world's largest meat processing company, was targeted by a ransomware attack. The company paid an $11 million ransom to prevent further disruption to its operations.

A modular banking trojan that spread through spam emails. It evolved into a major distributor of other threats.

An attacker calls a company's IT department, pretending to be from a vendor who needs access to a specific user's account to resolve a technical issue. The attacker fabricates a scenario (the 'pretext') to convince the IT staff to provide the credentials.

The Conti group has been associated with numerous attacks targeting various sectors, including healthcare, education, and government. They often use double extortion tactics, stealing data in addition to encrypting it.