Active Attacks involve altering or disrupting data or system operations, such as data modification, DoS, or spoofing. Passive Attacks involve monitoring or eavesdropping on data without altering it, like sniffing or traffic analysis. https://www.uninets.com/blog/difference-between-active-and-passive-attacks