• Confidentiality: It refers to data privacy, and its goal is to protect sensitive and confidential information from unauthorized access.

• Integrity: It refers to the accuracy and reliability of information, aiming to prevent unauthorized manipulation or modification.

• Availability: The final fundamental aspect of information security is the availability of information.

• Malware: software diseñado para perturbar el Malware: Software designed to disrupt the normal functioning of a device.

• Phishing Attacks: Attempts to deceive someone into revealing sensitive information.

• Social Engineering Attacks: The practice of manipulating people into providing access to or information about sensitive data.

• DDoS Attacks: A malicious attempt to disrupt a targeted server, service, or network by overwhelming it and its surrounding infrastructure with a flood of network traffic.

• Data Loss Prevention (DLP): DLP scans web traffic and applications for sensitive data and can block that data from leaving a protected area.

• Web Application Firewall (WAF): A WAF checks web requests and filters traffic based on rule sets.

• DDoS Mitigation: The process of protecting a server or network from DDoS attacks.

• Multi-Factor Authentication (MFA): MFA helps prevent account takeovers by requiring a secondary form of identification beyond a password.

• Encryption: Used to encode data so that only authorized users can understand it.

Examples:

• ILOVEYOU: A famous email virus that spread by tricking users into opening an attachment labeled "ILOVEYOU."

• Melissa Virus: A virus that spread through Microsoft Word documents via email, causing widespread disruption.

Examples:

• Blaster Worm: Exploited a vulnerability in Microsoft Windows to spread and cause infected systems to crash.

• Sasser Worm: Targeted Windows systems and spread through a vulnerability in the Local Security Authority Subsystem Service (LSASS).

Examples:

• Zeus: A Trojan used to steal banking information by logging keystrokes and capturing login credentials.

• Emotet: Initially a banking Trojan, it evolved into a botnet used to deliver other types of malware.

Examples:

• WannaCry: A ransomware attack that spread globally, affecting hundreds of thousands of computers and causing significant damage to businesses and healthcare systems.

• CryptoLocker: One of the first major ransomware threats, which encrypted users' files and demanded payment for the decryption key.

Examples:

• Keyloggers: A type of spyware that records every keystroke made by a user, often used to steal passwords and other sensitive information.

• CoolWebSearch: A spyware program that hijacked web browsers and redirected users to malicious sites.

Examples:

• Fireball: An adware that also had the capability to act as a browser hijacker, redirecting traffic and injecting ads.

• Gator: An adware program that displayed targeted advertisements based on user behavior.

Examples:

• Stuxnet: Although primarily known as a worm, Stuxnet used a rootkit to hide its presence on infected systems.

• Sony BMG Rootkit: A controversial rootkit that was installed by a copy protection measure on some Sony BMG music CDs, leading to a public outcry.

Examples:

• Mirai: A botnet that took control of IoT devices and was used to launch one of the largest DDoS attacks in history.

• Zbot (Zeus Botnet): A botnet that was used to steal financial information from thousands of infected computers.

Examples:

• PowerShell-based attacks: Many fileless malware attacks leverage legitimate tools like PowerShell to execute malicious commands in memory.

• DoublePulsar: An exploit used by the NSA, later leaked and used by cybercriminals, which was capable of executing fileless malware.

Examples:

• Fake AV (Antivirus) Software: Programs that pretend to be legitimate antivirus tools but either do nothing or install additional malware.

• WinFixer: A notorious scareware program that falsely warned users of security threats and demanded payment for supposed fixes.