Cybersecurity Quiz: Understanding Hacker Types

Computer Information Threats

• A threat is any potential occurrence, malicious or otherwise, that could harm an asset (computer). It is any bad thing that can happen to your computer.
• A vulnerability is a weakness that makes a threat possible. This can be from poor design, configuration mistakes, or inappropriate and insecure coding.
• An attack is an action that exploits a vulnerability or enacts a threat. Examples include sending malicious input to an application or flooding a network.

Types of Information Threats: Viruses

• A computer virus is a computer program or software that enters the computer system by attaching itself to another computer program and spreads itself across the system.
• If the spread is successful, the affected areas are then "infected" with the computer virus.
• Hackers and crackers are two types of people who create computer viruses.

Hackers vs. Crackers

• Hackers use their technical skills to enter computer systems without permission. Often, they are computer enthusiasts who break in to learn more or for pranks. Many hackers work with government bodies in solving cases.
• Crackers are malicious programmers who gain unauthorized access to computer systems. They destroy confidential data and create destructive programs, like viruses.

White-Hat, Black-Hat, and Gray-Hat Hackers

• White-hat hackers find vulnerabilities in computer networks for organizations and governments; they are often paid employees. White-hat hacking is legal.
• Black-hat hackers hack systems illegally for personal gain. This is highly skilled and often criminal activity and is illegal.
• Gray-hat hackers have a combination of black-hat and white-hat activities; they find issues in systems without permission. They sometimes ask for payment to fix the issue(s), but this is not always the case. Sometimes, gray-hat hacking violates the law.

Signs of Computer Virus Infection

• Speed of System: The time taken to open applications and system processing is slower.
• Pop-up Windows: Too many unexpected pop-up windows appear on the screen.
• Self-Execution of Programs: Files or programs open automatically in the background.
• Log Out from Accounts: The user is logged out from accounts and protected sites.
• Crashing of Device: The device crashes and stops working.

Types of Computer Viruses

• Boot Sector Virus: Infects the boot sector of floppy disks or the Master Boot Record (MBR).
• Direct Action Virus: Attaches itself directly to .exe or .com files and enters the device during execution. Also known as Non-Resident.
• Resident Virus: Saves itself in the computer's memory and infects other files and programs when the originating program isn't running. Hard to remove.
• Multipartite Virus: Can attack both boot sector and executable files.
• Overwrite Virus: Completely removes the existing program and replaces it with malicious code. Replaces the host code.
• Polymorphic Virus: Modifies its code to evade anti-virus detection.
• File Infector Virus: Infects executable files and spreads to other files and programs.
• Space Filer Virus: Fills in empty space of a file with viruses. Also known as cavity virus.

Virus Spread and Infection Ways

• Email Attachments
• Internet Downloads
• Removable Media
• Network Transmission
• Drive-by Downloads
• Software Vulnerabilities

Virus Mitigation

• Antivirus software: Detects and removes harmful software.
• Firewalls: Protects from malicious software.

Computer Worms

• A standalone malware program that replicates itself to spread to other computers within a network. It relies on security failures to access other computers.
• Spread: Often uses a computer network to spread.

Trojan Horse

• Malware that hides its true function, often disguising itself as legitimate software to gain unauthorized access to a device.
• Malware that acts covertly and is often used for opening backdoors, takes control of the affected device, exfiltrates user data, and downloads/runs other malicious software.

Ransomware

• Malware that prevents users from accessing their system or files. Then demands ransom payment to gain access.

Spyware

• A program that gathers confidential and sensitive information from a network.
• Information may include emails, passwords and credit card information.

Social Engineering Attacks

• Methods used to manipulate people into taking certain actions, like giving up sensitive information or money.

Discussion Points

• Details of social engineering attacks
• Social engineering attack lifecycle
• Types of social engineering attacks