Active Attack involves directly altering, disrupting, or damaging data or systems, such as through data modification or denial of service. Passive Attack involves silently monitoring or intercepting data without making any changes, like eavesdropping or traffic analysis. https://www.uninets.com/blog/difference-between-active-and-passive-attacks