Phases of cyberattacks