Match each cybersecurity incident with its corresponding threat or attack pattern: Incidents: 1. WannaCry 2. Dyn attack 3. Snowden incident 4. Operation Aurora 5. Target breach Threat/Attack Patterns: A. Ransomware outbreak propagating via an unpatched SMB vulnerability B. Large-scale distributed denial-of-service (DDoS) attack launched by an IoT botnet C. Malicious insider exfiltration of classified data D. Targeted advanced persistent threat (APT) campaign focused on intellectual property theft E. Third-party vendor credential compromise leading to point-of-sale (POS) malware deployment

### The pairs | Item | Matches | Why | |---|---|---| | WannaCry | Ransomware outbreak exploiting an unpatched Windows weakness | The course links the outbreak to the EternalBlue-exploited Windows weakness and worldwide disruption. | | Dyn | Distributed denial-of-service attack using a Mirai-infected Internet of Things botnet | Compromised connected devices generated traffic that disrupted the provider's service. | | Snowden | Malicious insider data exfiltration | The case concerns an authorized contractor copying and leaking classified information. | | Operation Aurora | Targeted advanced persistent threat associated with intellectual property theft | The case illustrates targeted, persistent attacks against technology organizations. | | Target breach | Third-party vendor compromise followed by point-of-sale malware | Vendor credentials provided a route into the retailer's environment, where payment systems were targeted. | ### Terms - **Advanced persistent threat (APT)**: A targeted, organized attack that seeks stealthy, sustained access. - **Point-of-sale (POS)**: Systems used to complete retail transactions. - **Internet of Things (IoT)**: Network-connected physical devices such as cameras or routers. ### Remember A case becomes easier to analyze when you separate the actor's route in from the resulting impact.