s they were following the attack. Computer forensics, evidence on computers, and storage systems must be conserved and presented in court. Any evidence of tampering with the evidence can invalidate the court proceeding. Cyber Terrorism between Countries In the past, countries engaged in spying and sabotage by planting agents in other countries. They hoped to learn strategic information about their enemies and potential enemies through networks of spies who often disguised themselves as friendly citizens. Some spies went beyond gaining information to planning acts of sabotage that damaged property, such as roads, bridges, and factories. These same countries also used networks of agents to ferret out spies trying to infiltrate their own institutions. All of these strategies still exist, but they are supplemented by cyber terrorism. Most cyber terrorism is conducted via the Internet. Acts of cyber terrorism can also be implemented by using sneaker attacks, whereby inside employees are co- opted by foreign governments or terrorist groups to learn government secrets, plant software bugs in computer- controlled weapons systems, or copy strategic information inside the organization. This strategy is used to circumvent security measures whereby strategic departments such as armed forces or defense departments attempt to shield themselves by bypassing www.TechnicalPDF.com the Internet for all data communications. Entities such as these communicate to other locations on private lines that they lease or build. These networks only connect to other trusted departments or perhaps suppliers. Cyber terrorism attacks not only cause computers systems to malfunction; they can also disable computer- controlled weapons systems. This is what occurred when North Korea launched its WannaCry worm that infiltrated computers networks worldwide. A worm is a software bug programmed to be activated at a later time. Worms are also referred to as bots. However, bots are more complex than worms and can do more damage. The May 2017 WannaCry attac