Tier 0
Opportunistic / commodity
Resources / capability
Minimal — automated scanning, known exploits, reused credentials from public dumps. No targeting; whoever's exposed gets hit.
Typical targets
Anyone with an exposed surface. Mid-market without basic hygiene gets selected for them automatically.
Most relevant defenses
- MFA
- EDR
- email security
- patching / exposure basics
- backup
Note · Most attacks worldwide are this — the baseline most orgs need to defend against first.