Topic 1 ยท Deep Dive

1.1 Why Cybersecurity Matters in Daily Life

Your Devices Are Already Indexed

Before you ever click anything, your home network has been catalogued. Scanning operators run banner-grab crawlers continuously, and indexing services make the results searchable by port, product, and firmware version. A single command such as masscan 198.51.100.0/22 -p23,445,3389,7547 --rate=10000 sweeps a full /22 (1,024 hosts) in roughly one second, so a router with WAN management enabled or a camera answering on port 554 appears in an index within hours of being powered on. Botnets such as Mirai then work down that list trying factory credentials like root/admin, converting one lazy device into a scanning node that attacks the next thousand.

Credential Stuffing Is Volume, Not Guessing

Classic brute force is nearly obsolete; stuffing replaced it. After a breach, attackers extract (email, password) pairs — single public leaks have exceeded 240 million records — and try each pair once per service, throttled to about one request per account per hour behind rotating residential proxies. A lockout rule that fires after 5 failed attempts never trips, because no single account ever fails five times. The technique succeeds purely because people reuse passwords, so the defense is mechanical: a password manager issuing 20-character unique secrets per site, plus FIDO2/WebAuthn passkeys that make a stolen secret mathematically useless.

What a Breach Actually Costs You

Account takeover cascades. A mailbox is effectively the reset-token vault for every other account, so losing email precedes losing the bank. Saved card tokens (16-digit, Luhn-checkable numbers) are drained by carding scripts within minutes. A social-engineered number-portability request defeats SMS one-time codes, which is why app-based or hardware factors matter. Downstream abuse — tax-refund claims, synthetic identities built from your identifiers — takes months and notarized affidavits to unwind, so a ten-minute hardening session has wildly asymmetric value.

High-Payoff Habits, in Order

Disable UPnP and remote administration on the router, set a WPA3 passphrase of 20 or more characters, keep firmware auto-updates on, enable MFA on your email first because it gates everything else, and act on breach alerts instead of muting them. Each control deletes an entire class of automated attack rather than one campaign.

Architecture Diagram

Home network under automated fire Scanning bots Phishing Cred stuffing Phone Laptop Home router Home LAN (NAT edge) Attack surface
Untargeted streams — scanning, phishing, credential stuffing — converge on one shared attack surface: phone, laptop, router.

Key Takeaways

« Back to Topic 11.2 »