Human Impacts Cyber Framework · v1.0

The Personal Cyber Attack Taxonomy

A reference classification of cyber attacks that target people rather than enterprises. Forty attack types are organised into six threat domains and mapped across four dimensions — the attacker's goal, the delivery vector, the target asset, and the primary harm to the victim.

Foundational source: The Cyber Helpline — Recovery Guides. Each attack type links to its corresponding victim-support guide.

42 of 42 attack types
D1

Ransom, Ransomware & Malware

Malicious software and coercion used to deny access to data or devices, or to extract payment through threats.

D1.01

Encrypting Ransomware

Malware encrypts the victim's files and changes their extensions; a ransom is demanded for the decryption key while the device otherwise still works.

goal Extortion vector Malware harm Financial loss
D1.02

Screen-Locking Ransomware

A ransom note appears the moment the device is switched on, locking the victim out of the device entirely until payment.

goal Extortion vector Malware harm Financial loss
D1.03

Content for Ransom

An attacker obtains sensitive information about the victim and demands payment or action to prevent its release.

goal Extortion vector Coercion harm Financial loss
D1.04

Sextortion

Threats to share intimate images or video of the victim unless money is paid or demands are met.

goal Extortion vector Coercion harm Psychological & financial
D1.05

Malware Infection

Software is placed on a device to steal information or cause damage, without the owner's knowledge.

goal Data theft / damage vector Malware harm Data loss
D2

Unauthorised Access

An attacker gains control of an online account or device without the owner's permission.

D2.01

Hacked Email Account

Unauthorised access to a webmail account such as Gmail, Hotmail or Yahoo.

goal Account takeover vector Account compromise harm Privacy & data loss
D2.02

Hacked Social Media Account

Unauthorised access to a social media account such as Facebook, X or Instagram.

goal Account takeover vector Account compromise harm Reputational & privacy
D2.03

Hacked Online Bank Account

Unauthorised access to the victim's online banking.

goal Financial gain vector Account compromise harm Financial loss
D2.04

Hacked Virtual Currency Account

Unauthorised access to an online cryptocurrency wallet or exchange account.

goal Financial gain vector Account compromise harm Financial loss
D2.05

Hacked Online Gaming Account

Unauthorised access to a gaming account such as Steam, Fortnite or PlayStation Network.

goal Account takeover vector Account compromise harm Financial loss
D2.06

Hacked Online Shopping Account

Unauthorised access to a shopping account such as Amazon or eBay.

goal Financial gain vector Account compromise harm Financial loss
D2.07

Hacked Home WiFi Network

Someone gains access to the victim's home wireless network without permission.

goal Network access vector Network intrusion harm Privacy & data loss
D2.08

SIM Swapping

An attacker takes over the victim's mobile number so calls, texts and 2FA codes route to the attacker.

goal Account takeover vector Identity abuse harm Financial & privacy
D2.09

Compromised Account (general)

A general case where an online account is suspected of being accessed without permission.

goal Account takeover vector Account compromise harm Privacy & data loss
D2.10

Compromised Device (general)

A general case where a computer, phone or tablet is suspected of being accessed or controlled remotely.

goal Device control vector Account compromise harm Privacy & data loss
D3

Harassment, Stalking & Surveillance

The internet and connected devices used to bully, intimidate, monitor, impersonate or humiliate a person.

D3.01

Online Harassment

Bullying or abuse online, including trolling and abusive direct messages.

goal Psychological harm vector Online abuse harm Psychological
D3.02

Cyberstalking

Persistent online stalking accompanied by severe threats to the victim's personal safety.

goal Intimidation vector Online abuse harm Physical & psychological
D3.03

Outing / Doxxing

Sharing someone's personal information, secrets or sensitive images online without consent.

goal Reputation damage vector Data exposure harm Privacy & psychological
D3.04

Fake Profiles / Impersonation

Fake profiles created to harass the victim, or impersonating the victim to cause distress.

goal Impersonation vector Identity abuse harm Reputational
D3.05

Fraping

Someone with access to the victim's social account posts content that causes distress or reputational damage.

goal Reputation damage vector Account compromise harm Reputational
D3.06

Catfishing

Someone pretends to be a different person to trick the victim into a personal relationship.

goal Deception vector Deception harm Emotional & financial
D3.07

Online Grooming

An adult builds a relationship with a minor online to manipulate, exploit or abuse them.

goal Exploitation vector Deception harm Physical & psychological
D3.08

Inappropriate Content

Exposure to hate speech, offensive material, adult content aimed at children, or harmful online 'challenges'.

goal Harm / radicalisation vector Content exposure harm Psychological
D3.09

Revenge Porn

An ex-partner shares sexually explicit images or video of the victim without consent to cause distress.

goal Reputation damage vector Data exposure harm Psychological & reputational
D3.10

Bugs, Cameras & Trackers

Physical or software surveillance — listening devices, hidden cameras, or location trackers/stalkerware.

goal Surveillance vector Physical / stalkerware harm Privacy & physical
D4

Social Engineering

Direct deception by email, phone or text that manipulates the victim into compromising their own security.

D4.01

Phishing

A deceptive email that tricks the victim into clicking, downloading or disclosing credentials.

goal Credential / data theft vector Deception (email) harm Data & financial
D4.02

Vishing

A fraudulent phone call that manipulates the victim into disclosing information or taking harmful action.

goal Credential / data theft vector Deception (voice) harm Financial loss
D4.03

Smishing

A fraudulent text message that tricks the victim into clicking a link or disclosing information.

goal Credential / data theft vector Deception (SMS) harm Data & financial
D5

Fraud & Scams

Deception intended to produce financial or personal gain for the criminal at the victim's expense.

D5.01

Virtual Currency Scams

The victim is defrauded through a cryptocurrency scheme or fake exchange.

goal Financial gain vector Deception harm Financial loss
D5.02

Card Fraud

Unauthorised transactions made using the victim's bank card details.

goal Financial gain vector Identity abuse harm Financial loss
D5.03

Identity Theft

An attacker steals and uses the victim's identity, often to open accounts or obtain credit.

goal Identity abuse vector Identity abuse harm Financial & reputational
D5.04

Online Auction Fraud

The victim is deceived when buying on an auction or marketplace site such as eBay or Amazon.

goal Financial gain vector Deception harm Financial loss
D5.05

Event-Based Scams

Scams that exploit a topical event or crisis (e.g. Covid-19) to add urgency and credibility.

goal Financial gain vector Deception harm Financial loss
D5.06

Recruitment Scams

Job-fraud schemes that deceive the victim while applying for work at home or abroad.

goal Financial gain vector Deception harm Financial loss
D5.07

Loan Scams

Fraud committed against the victim while they are taking out a loan.

goal Financial gain vector Deception harm Financial loss
D5.08

Investment Scams

The victim is defrauded while making what they believe to be a legitimate investment.

goal Financial gain vector Deception harm Financial loss
D6

Accidents, Media & Public Breaches

Exposure of personal data through mistakes, third-party breaches, or inaccurate public reporting.

D6.01

Lost Device

A device is lost, creating risk to any information stored on or accessible from it.

goal N/A (accidental) vector Human error / loss harm Data loss
D6.02

Accidental Information Share

The victim accidentally shares sensitive or confidential information online.

goal N/A (accidental) vector Human error harm Privacy & data loss
D6.03

Online Reporting Issue

A website publishes fake or inaccurate information about the victim.

goal Reputation damage vector Data exposure harm Reputational
D6.04

Service Provider Breach

A company, app or service the victim uses is hacked, exposing the victim's data (third-party breach).

goal Data theft vector Third-party breach harm Privacy & data loss
DR

Response & Recovery (cross-cutting)

Not attack types — the actions a victim takes across any incident to preserve evidence and recover losses.

DR.01

Preserve Evidence & Report

Cross-cutting response: how to save and protect digital evidence before reporting cybercrime to the authorities.

goal Response vector Cross-cutting harm —
DR.02

Recovering Money

Cross-cutting response: steps to try to recover money lost in an online scam or cybercrime.

goal Response vector Cross-cutting harm —