Those bad people, can also be called malicious attackers, who use weakness in particular application and misuse it.(By application I mean the software used for website, such as wordpress, doorpal, or in-house developed etc)These malicious attackers don???t target particular websites; instead they keep on browsing internet and keep looking for security loopholes that they can use by putting attack