Cyber threats
How common cyber threats work and how they are recognised, explained with generic, fictional examples and linked to official guidance.
Start here
- Phishing, smishing and vishing explainedPhishing vs smishing vs vishing: how fake emails, texts and calls try to get passwords, codes or money, the warning signs, and how to check and report.
- Ransomware explained: how it works and what limits the damageWhat is ransomware? How it gets in, the warning signs ASD lists, why ASD says never to pay, and the defences and recovery steps it describes.
- Identity theft and identity fraud explainedIdentity theft in Australia explained: how stolen details get misused, warning signs, how credit bans and credit reports work, and where to get help.
Social engineering
- AI phishing and scams: how criminals use AI and how to checkAI scams explained: how scammers use AI for convincing phishing messages, fake websites, chatbots and voice clones, and the checks Scamwatch describes.
- Business email compromise explainedWhat business email compromise (BEC) is, why fake invoice emails look genuine, the warning signs Scamwatch lists and the payment checks it describes.
- Phishing, smishing and vishing explainedPhishing vs smishing vs vishing: how fake emails, texts and calls try to get passwords, codes or money, the warning signs, and how to check and report.
- Social engineering explained: the tactics scammers use and how to verifyWhat is social engineering? Pretexting, baiting, tailgating and urgency tactics explained, with the warning signs and verification steps ASD describes.
- Deepfake and voice-cloning scams explainedHow deepfake scams use AI-made video and cloned voices to impersonate relatives, managers and public figures, and the checks Scamwatch and ASD describe.
- QR code phishing: how fake codes work and what official guides sayHow QR code scams work, where fake codes appear, and the safer-scanning tips and next steps the eSafety Commissioner's Be Connected and Scamwatch describe.
Identity and personal information
- Data breaches and breach notifications explainedGot a data breach notification? How Australia's Notifiable Data Breaches scheme works, what a notice should say, how to check it, and the OAIC's steps.
- Identity theft and identity fraud explainedIdentity theft in Australia explained: how stolen details get misused, warning signs, how credit bans and credit reports work, and where to get help.
Malware
- Malicious browser extensions: risks and how to review or remove themHow malicious browser extensions work, the risks, and step-by-step ways to review and remove extensions in Chrome, Edge, Safari and Firefox.
- Malware and spyware explained: signs, checks and removalMalware and spyware explained: how they get onto devices, the warning signs ASD lists, and how to remove them with built-in Windows, Mac and Android tools.
- Ransomware explained: how it works and what limits the damageWhat is ransomware? How it gets in, the warning signs ASD lists, why ASD says never to pay, and the defences and recovery steps it describes.
Account attacks
Business threats
- Denial-of-service (DoS and DDoS) attacks explained for small business websitesDDoS attacks explained: what denial-of-service means for a small business website, what ASD's ACSC says about preparing, and questions to ask a host.
- Insider threats explained for small organisationsInsider threats explained: how accidental and deliberate insider risk affects small organisations, and how access control and offboarding are described.
Cyber threats: questions people ask
What is phishing?
Phishing is a fake message that tries to get passwords, codes or money. Smishing uses text messages and vishing uses phone calls. Phishing, smishing and vishing explained
What is ransomware?
Ransomware locks or steals files and demands payment. Our guide covers how it spreads, the protections the ACSC lists, and what to do after an attack. Ransomware explained
What do I do if my details were in a data breach?
Our guide explains how to check a breach notice is genuine, the steps official sources list, and where to get free support. Data breaches explained