Cyber Kill Chain Stages

Cyber Kill Chain

• The cyber kill chain is a term coined by a computer scientist at Lockheed-Martin Corporation to describe the stages of a cyber attack.
• The stages of a cyber attack, from start to finish, are: reconnaissance, weaponization, delivery, exploitation, installation, and command and control.

Reconnaissance

• The first stage of a cyber attack, where the attacker identifies a target device and searches for vulnerabilities.

Weaponization

• The second stage, where the attacker uses a remote tool kit and malware (such as viruses or worms) to address the identified vulnerabilities.

Delivery

• The third stage, where the threat actor injects cyber weapons into the victim network through various methods, including:
  • Phishing emails
  • Drive-by downloads
  • USB drives
  • Insiders

Exploitation

• The fourth stage, where the malware code is used to trigger the attack, taking action on the target network to exploit vulnerabilities.

Installation

• The fifth stage, where malware is installed on the victim machine.

Command and Control

• The final stage, where the malware allows the remote threat actor to gain access to the victim machine.

Learn about the different stages of a cyber attack, from reconnaissance to the final goal of the attack, including weaponization and delivery. Understand how attackers identify vulnerabilities and inject malware into a victim network. Test your knowledge of cyber security!