The 36 Most Common Cyberattacks (2025) | Huntress

**Executive summary:** This report is a concise, high-level primer on common cyberattacks — outlining malware families (viruses, ransomware, trojans, worms, rootkits, infostealers, bots), social-engineering tactics (phishing, spear phishing, whaling, baiting, pretexting), network and exploitation techniques (DoS/DDoS, MITM, IP/ARP/DNS spoofing, SQL injection, XSS, CSRF, session hijacking), and other threats (insider threats, supply-chain attacks, credential attacks) — and concludes with practical mitigation recommendations such as employee training, strong password/MFA, timely patching, endpoint protection, backups, network defenses, and consideration of managed EDR.