Sometimes it seems impossible to understand cyber-attacks because there are so many different types, and they are always evolving. The majority of cyber-attacks are tailored to businesses, individual people are not always the primary targets. However, that does not mean individuals cannot be targeted. The Federal Trade Commission reports that $3.5 billion was lost to imposter scams in 2025. These imposter scams usually come from a few main sources, which are identified below. Cyber-attacks are used to obtain your information. Once attackers have even one piece of that information, they can carry out the rest of their imposter scam.
Malware
Malware is most commonly thought of as a virus. In general, malware is unwanted software or a program on your computer that is intended to perform malicious tasks. A virus is one type of malware that can replicate by attaching itself to files or programs. A computer virus can steal information or corrupt your machine, potentially rendering it unusable.
A couple other types of malware people encounter frequently are worms and trojans. Worms are a type of malware that can replicate itself across multiple devices. If a worm infects one computer, it can spread across your home network to other devices. A trojan is a malicious software disguised as a legitimate software. When you go online to download a program or app, you may encounter an imposter website or fake download. If you accidentally download a program from an untrustworthy source, trojans can install spyware, adware, and even viruses intended to corrupt your machine.
The best way to defend against these is anti-malware programs. Any Windows 11 device or Mac computers running macOS Ventura receive security upgrades and built-in anti-malware protections. When it comes to third-party programs, choosing whether to use them is ultimately up to the user.
Man-in-the-Middle Attacks
Man-in-the-Middle attacks are exactly what they sound like; an attacker positions themselves between two parties. Most commonly, these attacks happen when you connect to an unsecured public internet and an attacker takes advantage of that unsecure connection. Attackers can leverage physical devices, or sometimes malware, to intercept your information as you send it over the internet.
These attackers impersonate an internet connection. For example, you might connect to what you think is “Corporate WiFi” but in reality your data is being intercepted by an attacker positioned between you and the intended connection.
Using a VPN connection or cellular data through your phone or hotspots are some of the easiest and most effective ways to defend against these attackers. VPNs encrypt your internet traffic, while cellular data generally provides a more secure connection than public WiFi. Although man-in-the-middle attacks are still possible over cellular data, they are much less common because of the security requirements for cellular providers.
Phishing
Phishing is the most common type of cyber-attack. It involves impersonation through scam emails, phone calls, text messages, ads, and other forms of communication. The goal is to obtain information about you, most commonly to steal money.
When someone is phishing for information, their main goal is often to gain access to your finances. They may do this by compromising your account directly, or by impersonating a legitimate organization and tricking you into taking action yourself. Attackers may pretend to be a legitimate service provider to “phish” for your card numbers or login credentials. They may also to pretend to be someone you know personally.
Once attackers know even one piece of information about you, they can use it to create panic, and a sense of urgency, making you more likely to hand over login credentials or banking information without thinking it through.
When these attacks happen, you play a key role in defending yourself. Slow down, ask questions, and verify the situation using trusted sources. If someone claiming to represent your credit union calls and asks you to verify your full card number, expiration date, and CVV, hang up and call the number you have saved elsewhere. Sentinel Federal Credit Union will never ask you to provide this type of information over the phone.
Cyber-attacks are a multi-billion dollar crime industry. Although attacks are constantly changing, especially those targeting businesses, many attacks against individuals stem from one of these three types. The methods used for phishing may change, the types of malware may evolve, and new devices may create additional ways for attackers to compromise internet-connected systems. Being aware of these attacks and knowing how to recognize them will help you stay safer as they evolve.
At Sentinel FCU, we stay informed about evolving cyber threats, provide ongoing staff training, and use resources to keep our systems and information secure. We’re committed to protecting our members and helping you stay informed. By sharing knowledge and practicing safe online habits, we can all take steps to better protect ourselves from cyber-attacks.
