Various Cyber Attacks Explained 💀🧑🏻‍💻

Ajouté : 2026-06-03

[00:00:00]DoS attack, denial of services attack.

[00:00:02]Normally, when you open a website, your device sends a request and the server responds. Servers are designed to handle many requests at the same time, >> [music] >> but they still have limits. In a DoS attack, a hacker floods the server with an enormous number of requests. So many requests arrive at once that the system simply cannot handle them. The server becomes overloaded. It slows down or stops responding [music] entirely.

[00:00:23]Legitimate users can no longer access the service. A more powerful version [music] of this attack is called a distributed denial of service attack or DDoS. Instead of one computer attacking the server, thousands of compromised machines attack it simultaneously.

[00:00:35][music] These machines often belong to a network of infected devices known as a botnet.

[00:00:40]Large online services, gaming platforms, and even government websites have been taken offline [music] by massive DDoS attacks. Man-in-the-middle attack.

[00:00:48]Normally, when you communicate with a website, the connection happens directly between your device and the server. But in a man-in-the-middle attack, a hacker secretly places themselves between [music] the two. You imagine sending a message to someone, but another person intercepts it first, [music] reads it, and then forwards it along.

[00:01:03]You believe the conversation is private, but someone else is silently [music] listening. That's essentially what happens here. The attacker intercepts the communication and can capture sensitive data like usernames, passwords, [music] and financial information. These attacks often happen on unsecured public Wi-Fi networks, where attackers can more easily intercept traffic.

[00:01:22]Packet [music] sniffing.

[00:01:23]Every piece of information moving across a network travels in small units called packets.

[00:01:28]Packet sniffing [music] is the process of capturing those packets and analyzing the data inside them.

[00:01:32]Network engineers use packet sniffers [music] for legitimate troubleshooting, but attackers can also use them to spy on network traffic. If the data traveling across the network is not encrypted, an attacker may be able to see things like login credentials, emails, or private messages. This is exactly why modern websites use encryption technologies like HTTPS.

[00:01:51]Encryption prevents attackers from easily reading intercepted packets.

[00:01:55]DNS spoofing.

[00:01:56]The Domain Name System or DNS [music] acts like the phone book of the internet. It translates website names into IP addresses so your device knows where to connect. When you type a website address into your browser, your device asks a DNS server for the correct IP address. [music] But in a DNS spoofing attack, the attacker manipulates this process.

[00:02:13]Instead of directing you to the real website, the attacker redirects you to a fake server that looks identical to the original site. Everything appears normal.

[00:02:20]>> [music] >> The website looks correct. The design is identical. But the moment you enter your login details, the attacker captures them.

[00:02:27]To the victim, it feels like they simply logged into a normal website, but in reality, they just handed their credentials to a hacker. ARP spoofing.

[00:02:35]Devices inside a network rely on something called the address resolution protocol. ARP connects IP addresses to physical MAC addresses so devices can communicate with each other.

[00:02:45]In an ARP spoofing [music] attack, a hacker sends fake ARP messages across the network. These messages trick devices into believing that the attacker's computer is actually the network's router. Once that happens, network traffic starts [music] flowing through the attacker's machine.