← Learning Hub

Video Resources

How Do Cyber Attacks Work? Threat Actors, IOCs, and MITRE ATT&CK

Understand how cyber attacks are executed. Explore threat actors, attack vectors, indicators of compromise, and the MITRE ATT&CK framework in depth.

Frequently Asked Questions

What this playlist answers

5 questions this playlist covers — skim them for a quick takeaway, or dive into the videos above for the full picture.

A threat actor is an individual or group that intentionally exploits vulnerabilities in systems or networks. Common types include nation-states, organized crime groups, hacktivists, insider threats, and unskilled attackers. A threat vector is the method or pathway an attacker uses to gain unauthorized access to a system. Common vectors include phishing, malware, social engineering, zero-day exploits, and brute force attacks. IOCs are pieces of evidence that suggest a system has been compromised, such as unusual network traffic, unexpected file changes, unauthorized logins, or known malicious IP addresses and file hashes. MITRE ATT&CK is a knowledge base of adversary tactics and techniques based on real-world observations. Security teams use it to understand attack patterns, improve detection, and build stronger defensive strategies. WannaCry was a 2017 global ransomware attack that exploited a Windows vulnerability to encrypt files on infected machines, demanding payment for decryption. It demonstrated how nation-state-developed exploits can cause widespread damage when misused.