An attack is one of the biggest security threats in information technology, and it comes in different forms. A passive attack is one that does not affect any system, although information is obtained. A good example of this is wiretapping. An active attack has the potential to cause major damage to an individual’s or organization’s resource because it attempts to alter system resources or affect how they work. A good example of this might be a virus or other type of malware.