Cyber-attacks come in four ways

Cyber-attacks directed against Sri Lanka’s financial sector are grouped into four categories, namely phishing, ransomware, malware and information leakage, according to FINCSIRT.

Phishing is a type of cybercrime where criminals try to trick individuals into revealing sensitive information such as user names, passwords and credit card details. It is typically carried out through email or instant messaging.

Malware, or malicious software, is any programme or file that is harmful to a computer user. These include computer viruses, worms, Trojan horses and spyware.

Ransomware is a type of malware that prevents users from accessing their system or personal files unless a ransom is paid in order to regain access.

Information leakage is where sensitive data are revealed, either willingly or unwillingly, enabling hackers to exploit weaknesses in the system.