# Attack vector
An attack vector is the specific path or method a cybercriminal uses to gain unauthorized access to a system, network, or application to deliver a malicious payload. It represents the means by which a vulnerability can be exploited. Common examples include phishing emails, malware, and unpatched software vulnerabilities.
**Pronunciation:** uh-tak vek-ter
**Difficulty:** Beginner
**Synonyms:** Threat vector, Attack path, Infiltration route
**Categories:** Cybersecurity, Network Security
**Tags:** cybersecurity, security, hacking, vulnerability, threat, malware
Canonical: https://scaleengineer.com/glossaries/attack-vector
---
## Definitions

- **In Cybersecurity:** In the context of cybersecurity, an **attack vector** is the precise method or pathway a threat actor utilizes to penetrate a target's security defenses. The ultimate goal is typically to deploy a malicious payload, exfiltrate data, or gain control over the compromised system.

An **attack vector** exploits a vulnerability, which could be a technical flaw, a configuration error, or a human weakness. Understanding these vectors is fundamental to designing effective security strategies.

**Common Attack Vectors**
*   **Social Engineering**: Manipulating individuals into divulging confidential information or performing actions that compromise security. Phishing, where attackers send fraudulent emails disguised as legitimate ones, is the most prevalent example.
*   **Malware**: Malicious software (e.g., viruses, worms, ransomware, spyware) delivered through various means, such as email attachments, malicious downloads, or infected USB drives.
*   **Credential Compromise**: Using stolen, weak, or default credentials to gain unauthorized access. This can be achieved through brute-force attacks, credential stuffing, or purchasing credentials on the dark web.
*   **Unpatched Vulnerabilities**: Exploiting known security flaws in software, operating systems, or applications that have not been updated with the latest security patches.
*   **Insider Threats**: When individuals with legitimate access to systems—such as employees or contractors—misuse their privileges, either maliciously or unintentionally.
*   **Supply Chain Attacks**: Compromising a trusted third-party vendor or software to gain access to the primary target's network. This **attack path** is particularly insidious as it bypasses direct defenses.

## Etymology

The term combines 'attack,' signifying an aggressive, hostile action, with 'vector,' a term from mathematics and physics denoting a path with both direction and magnitude. In this context, it metaphorically describes the specific pathway an attack takes to reach its target.

## First used

Late 1990s

## Historical context

The concept of an **attack vector** has evolved alongside computing technology. In the early days of personal computers, the primary **attack path** was physical media like floppy disks, used to spread viruses like the Elk Cloner (1982).

With the rise of the internet in the 1990s, network-based **attack vectors** became prominent. The Morris Worm (1988) demonstrated how a self-replicating program could exploit vulnerabilities across a network, establishing a new type of **threat vector**. Throughout the late 1990s and 2000s, email became a dominant **attack vector**, used to deliver malware and execute phishing scams.

In the modern era, the landscape of **attack vectors** has expanded dramatically to include social media, cloud services, IoT devices, and complex supply chain attacks. The term itself became standard vocabulary as cybersecurity formalized as a discipline, providing a clear way to describe the specific methods used by adversaries.

## Q&A

- **What is the difference between an attack vector and an attack surface?:** An **attack vector** is the *specific method or path* an attacker uses to breach a system, such as a phishing email or a specific software vulnerability. It's a single point of entry.

In contrast, the **attack surface** is the *sum of all possible attack vectors*. It represents the total number of points or vulnerabilities an attacker could potentially exploit to enter or extract data from an environment. Reducing the attack surface means minimizing the number of available **attack paths**.

## Usage examples

- Phishing remains one of the most common **attack vectors** because it directly targets human error rather than complex system vulnerabilities.
- The security team discovered that an unpatched server was the primary **attack vector** used in the recent data breach.
- To secure our network, we must identify and mitigate every potential **threat vector**, from weak employee passwords to insecure third-party APIs.

## Related terms

- Attack Surface
- Vulnerability
- Exploit
- Threat
- Payload
- Zero-Day Attack

## Popular related terms

- Phishing
- Malware
- Ransomware
- Social Engineering