Common Cyber Attacks and How Cyber Security Fights Them

Every time you scan a UPI QR code, log into your college portal, or tap an OTP into your phone, you depend on an invisible network of safeguards. When those safeguards fail, the consequences range from a drained bank account to a hospital shutting down its servers. With over 740,000 cybercrime cases reported to the Indian Cyber Crime Coordination Centre in just the first four months of 2024, understanding how digital attacks work and how defenders respond is no longer a niche concern. It is basic digital literacy.

Cybercrimes, cyberattacks, and cyberterrorism: three terms, one battlefield 🔗

These three words often appear together, but they describe distinct phenomena. A cybercrime is any illegal activity carried out using computers or the internet, ranging from credit card fraud to identity theft. A cyberattack is a deliberate attempt to breach, damage, or take control of a digital system, regardless of whether money is involved. A cyberterrorism incident is more severe still: it is a politically or ideologically motivated attack designed to cause widespread fear, disrupt essential services, or threaten national security.

To picture the difference, consider a single fraudster running an OTP scam on a few hundred people. That is cybercrime. A coordinated group breaching a private company’s servers to steal customer data is a cyberattack. A hostile state targeting India’s power grid to trigger nationwide blackouts would qualify as cyberterrorism. According to India’s Ministry of Home Affairs, the country has registered hundreds of thousands of cybercrime cases over the last five years, with financial fraud now dominating the complaint list.

The most common types of cyber attacks 🔗

Attackers rely on a fairly stable toolkit, even as the specific tactics evolve. Knowing the categories helps you recognise a threat before it succeeds.

Malware 🔗

Malware is short for malicious software, an umbrella term covering viruses, worms, trojans, spyware, and ransomware. A trojan disguises itself as a useful program, while spyware silently records your activity. The most disruptive form today is ransomware, which encrypts a victim’s files and demands payment for the decryption key. When AIIMS Delhi suffered a ransomware attack in 2022, patient records, appointment systems, and lab reports went offline for nearly two weeks, illustrating how a single malware infection can paralyse a major institution.

Phishing 🔗

Phishing is the digital equivalent of a con artist’s letter. Attackers send emails, SMS, or WhatsApp messages that look like they are from a bank, courier service, or government office, and trick the recipient into sharing credentials or clicking a malicious link. According to IBM’s threat intelligence research, phishing remains the single largest initial infection vector in data breaches worldwide. Variants include spear phishing (targeted at a specific person), vishing (voice calls), smishing (SMS), and whaling (aimed at senior executives).

Social engineering 🔗

Where malware exploits software flaws, social engineering exploits human psychology. The attacker manipulates trust, fear, or urgency to make the victim act against their own interest. The “digital arrest” scam that surged across India in 2024, where fraudsters posed as CBI or ED officers over video calls and demanded immediate payment to avoid fabricated arrest warrants, is a textbook social engineering operation. Prime Minister Narendra Modi specifically addressed this scam in his Mann Ki Baat broadcast, signalling how widespread the problem had become. Other social engineering techniques include baiting (luring users with a tempting offer), pretexting (inventing a fake story), and scareware (false virus warnings that push users to install harmful software).

Denial-of-Service (DoS) and DDoS attacks 🔗

A Denial-of-Service attack floods a website or server with so much traffic that legitimate users can no longer access it. A Distributed Denial-of-Service (DDoS) attack does the same thing using thousands of hijacked devices, often part of a botnet. These attacks are frequently used to extort businesses or to distract security teams while another attack is launched.

Man-in-the-Middle (MitM) attacks 🔗

When you connect to an unsecured public Wi-Fi at a café or railway station, an attacker on the same network can intercept the data flowing between your device and the website you are visiting. They can read passwords, modify messages, or redirect you to a fake site. Encrypted connections (HTTPS) and a reliable VPN make these attacks far harder to pull off.

SQL injection and zero-day exploits 🔗

SQL injection targets databases behind websites, allowing an attacker to read or alter records by inserting malicious code into a search box or login form. A zero-day exploit takes advantage of a software vulnerability before the developer has had a chance to release a fix. Both attacks are common in breaches of corporate and government systems.

Levels of cyber threats: from individual scams to international conflict 🔗

Cyber threats operate at several levels, and the scale of an attack changes who responds to it and how.

National-level threats 🔗

At the national level, the targets are usually critical infrastructure such as power grids, banking networks, hospitals, transport systems, and government databases. India’s National Critical Information Infrastructure Protection Centre (NCIIPC), established under Section 70A of the Information Technology Act, 2000, is the nodal agency for protecting these assets. Attacks at this level can disrupt the daily life of millions, as seen during cyber incidents affecting power utilities and banking institutions in recent years.

International-level threats 🔗

At the international level, cyberattacks blur the line between crime and warfare. State-sponsored groups, often with deep funding and technical expertise, target other nations to steal defence secrets, influence elections, or destabilise economies. The growing use of AI-powered attacks, including deepfakes for social engineering and autonomous malware that adapts to defensive measures in real time, has raised the stakes considerably. Recent incidents have exposed hundreds of thousands of digital assets across critical sectors in India alone.

Organisational and individual threats 🔗

Below the national level sit corporate breaches, fraud against small businesses, and crimes against individuals. The Indian Cyber Crime Coordination Centre reports that roughly 85% of complaints in 2024 involved online financial fraud, with investment scams, fake KYC calls, and UPI-related fraud leading the list. Indians lost an estimated ₹11,333 crore to cyber fraud in just the first nine months of 2024, according to official I4C figures.

Why cybercriminals keep winning: adaptive attacks 🔗

One reason cybercrime continues to grow is that attackers are remarkably good at adapting. When banks introduced OTPs to verify transactions, fraudsters invented OTP scams. When users learned not to click suspicious email links, attackers moved to WhatsApp and SMS. When two-factor authentication became common, criminals began using SIM swap fraud to intercept verification codes.

The current frontier involves artificial intelligence. AI-generated phishing emails are now grammatically flawless and contextually convincing. Voice cloning tools can mimic a family member’s voice in seconds, enabling fraud calls that sound chillingly authentic. Deepfake video technology has been used in “digital arrest” scams, where the fake officer on the video call appears entirely real. The pace of adaptation means that any single security control quickly becomes inadequate on its own.

Cybersecurity: the defender’s response 🔗

Cybersecurity is the practice of protecting computers, networks, programs, and data from unauthorised access, damage, or attack. It is not a single product or technique but a layered system that combines technology, processes, and human awareness.

The multi-layer defense model 🔗

The principle behind modern cybersecurity is defense in depth: if one layer fails, others continue to protect the system. A typical multi-layered defense includes a perimeter firewall, network monitoring, endpoint antivirus, multi-factor authentication, encrypted storage, regular backups, and user training. As security researchers at Kaspersky have noted, sophisticated attacks routinely defeat single-point defenses, which makes layered protection essential for any organisation handling sensitive data.

India’s institutional architecture 🔗

India has built a network of specialised agencies to handle different aspects of cyber defense. The Indian Computer Emergency Response Team (CERT-In), operating under the Ministry of Electronics and Information Technology, is the national agency for responding to cyber incidents. In 2025 alone, CERT-In handled over 29.44 lakh cyber incidents and issued 1,530 alerts and 65 advisories. The National Cyber Coordination Centre (NCCC) scans internet traffic in real time to detect threats, while the Cyber Swachhta Kendra helps citizens remove botnet infections from their devices. For citizens, the 1930 cybercrime helpline and the National Cyber Crime Reporting Portal at cybercrime.gov.in offer rapid response, with early reporting significantly improving the chances of recovering defrauded funds.

Specialised branches of cyber security 🔗

Because attacks come in many forms, cybersecurity has split into specialised disciplines.

Application security 🔗

Application security focuses on protecting individual software programs from being exploited. It covers secure coding, vulnerability testing, and tools like web application firewalls that filter malicious traffic before it reaches an app. Mobile banking and UPI apps depend heavily on this layer.

Network security 🔗

Network security defends the infrastructure that moves data between devices. Firewalls, intrusion detection systems, encrypted protocols, and segmented networks all fall under this branch. The goal is to spot and block attackers before they reach valuable systems.

Cloud security 🔗

As organisations move to platforms like AWS, Azure, and Google Cloud, cloud security has become critical. According to a survey cited by PwC India, more than half of Indian security executives identified cloud-related threats as the leading risk to their organisation. Cloud misconfigurations, weak identity controls, and exposed storage buckets account for a large share of recent breaches. Cloud security relies on identity-centric controls, encryption, continuous compliance monitoring, and shared responsibility between the cloud provider and the customer.

Information security and data protection 🔗

Information security is the broader practice of ensuring that data remains confidential, accurate, and available to those who need it. Encryption, access controls, and regular audits are central. India’s Digital Personal Data Protection Act, 2023 has formalised many of these requirements for organisations handling Indian citizens’ data.

Endpoint and mobile security 🔗

Every laptop, smartphone, and IoT device is a potential entry point. Endpoint security uses antivirus tools, device encryption, and remote management to keep these devices safe even when users are away from office networks.

Operational and human-layer security 🔗

The strongest technical controls fail when a user willingly hands over an OTP. Operational security covers the policies, training, and incident response plans that prepare an organisation for an attack. As cybersecurity layers expand, the human factor remains the most exploited entry point, which is why awareness training is often the highest-impact investment an organisation can make.

What you can do as an individual 🔗

Personal cybersecurity does not require a degree in computer science. A handful of habits dramatically reduce your risk: use strong, unique passwords supported by a password manager, enable multi-factor authentication on every important account, keep your operating system and apps updated, avoid public Wi-Fi for banking, and treat unexpected calls or messages with healthy suspicion. If you do fall victim, file a complaint at 1930 or the National Cyber Crime Reporting Portal immediately, since the first few hours significantly increase the chances of fund recovery.

What do you think? Have you or someone you know been targeted by a cyber scam, and what gave it away? As AI makes attacks more convincing, do you believe the responsibility for staying safe lies more with individuals, companies, or the government?

References

1. https://www.mha.gov.in/MHA1/Par2017/pdfs/par2024-pdfs/RS27112024/226.pdf
2. https://www.ibm.com/think/topics/social-engineering
3. https://www.pib.gov.in/PressReleasePage.aspx?PRID=2116341&reg=3&lang=2
4. https://www.6clicks.com/resources/blog/india-critical-infrastructure-cybersecurity-cert-in-audit-rules
5. https://www.dexpose.io/cyber-crime-in-india/
6. https://www.kaspersky.com/enterprise-security/wiki-section/products/multi-layered-approach-to-security
7. https://www.pib.gov.in/PressReleasePage.aspx?PRID=2217537&reg=3&lang=1
8. https://www.statista.com/statistics/1427987/india-major-cyber-threats-to-organizations/