An active cyber attack is perpetrated by an intentional threat source that attempts to alter a system, its resources, its data, or its operations. In contrast, a passive cyber attack infiltrates purely in order to make use or data or learn information.