What are the four broad phases of a cyberattack?

Cyberattacks, which can be a component of cyberwar, generally proceed through four broad phases:1

• Reconnaissance: Attackers probe for system weaknesses and gather information. This may involve using social engineering to obtain private data or researching methods to breach the system, such as acquiring malware.1
• Delivery: Attackers implement their infiltration plan. Common methods include using an infected USB, creating a fake website, or embedding malicious links in emails.1
• Breaching: If the infiltration is successful, the attackers gain access to the target's system and establish a digital presence.1
• Attack: Having gained access, attackers may attempt to disable security measures, move to more valuable networks, or achieve their specific goals, such as stealing sensitive information, disrupting operations, or gaining remote control of the system.1

Following these phases, advanced attackers often attempt to remove evidence of their presence or leave behind a "back door" for future access.1