Many people associate cyberattacks with large-scale, random incidents. In reality, some attacks are highly targeted: aimed at a specific organisation, department or even a single individual. These targeted attacks are often carried out by well-organised cybercriminal groups and have clearly defined objectives.
In the e-learning Targeted Attacks, employees learn what targeted attacks are and why they are so dangerous. Although they represent a small percentage of all cyberattacks, they are often far more successful and damaging. Attackers take their time, gather intelligence and combine multiple attack techniques to reach valuable information.
The course explains that targeted attacks can take many forms. Examples include phishing emails crafted for a specific individual, ransomware attacks aimed at high-value organisations, or social engineering techniques that exploit psychological pressure. These methods are frequently combined.
Through two story-driven videos, targeted attacks are made tangible and relatable.
The first video follows Stephanie, a working mother who unknowingly becomes the victim of a targeted attack. Her personal and financial data is compromised without her realising her system has already been breached.
The second video focuses on Bart, an employee who is attacked via a seemingly legitimate email. Hackers gain access to his computer and pressure him into harming his employer.
The course highlights why targeted attacks are difficult to detect. Attackers are patient, well-prepared and often remain hidden for long periods. However, warning signs do exist, such as unusual network activity, unknown devices, unexplained system slowdowns or highly personalised phishing messages.
Participants also learn which preventive measures reduce risk, including strong passwords, multi-factor authentication, up-to-date software, limited access rights and ongoing security awareness training. At the same time, the course stresses that prevention is not always possible and that effective response is critical.
The course concludes with clear action steps: isolate affected systems, report incidents immediately, gather information, restore systems and evaluate lessons learned. Employees learn that fast and correct action can significantly limit the impact of a targeted attack.
What will participants learn?
After completing this course, participants will:
- understand what targeted attacks are and why they occur
- recognise different types of targeted attacks
- know why individuals can be specific targets
- identify warning signs of targeted attacks
- understand which preventive measures reduce risk
- know how to act immediately when an attack is discovered
Who is this course for?
This course is suitable for:
- all employees, regardless of role or technical expertise
- organisations preparing for advanced cyber threats
- teams addressing phishing, ransomware and social engineering
- employees involved in or affected by incident response
Why this course is relevant right now
Targeted attacks are increasing and increasingly focus on people rather than technology. Raising employee awareness strengthens organisational resilience against advanced threats.