Malware and Cyber Security Quiz

Malware Overview

• Malware is malicious software designed to damage or disable a target system.
• Computer attacks can be done manually or automatically using malware.
• Common types of malware include viruses, Trojans, rootkits, botnets, adware, ransomware, and worms.
• Malware can exploit vulnerabilities in software or systems to gain control or access to data.

Malware Classification

• Malware can be classified into host-program and independent types.
• Host-program malware embeds itself in an existing program.
• Examples of host-program malware include: trapdoors/backdoors, logic bombs, Trojan horses
• Independent malware operates independently; examples include: viruses, bacteria, worms, zombies.

Attack Methodology

• Footprinting involves gathering public information about a target.
• Scanning identifies open ports and services on a target system.
• Enumeration gathers information about accounts and shared resources on a system.
• Penetration is the actual attack phase aiming to gain control.
• Denial-of-Service attacks flood the target system to make it unavailable.
• Elevation of privilege attempts to acquire higher-level access.
• Data pilfering involves copying or stealing data.
• Techniques for concealing actions and covering tracks are used.

Malware Definition

• Malware is any code that performs malicious actions.

• Malware disrupts computer operations, steals data, or bypasses controls.

• Malware comes in various forms, including executable code, scripts, active content, and software variants.

Malware Evolution

• Malware has evolved from simple to complex over time.
• New techniques and tactics are constantly being developed.
• This evolution makes preventing and identifying malware more challenging.

Motivations of Network Attacks

• Wannabe Lamers: Aspiring hackers motivated by a desire to be recognized.
• Script Kiddies: Inexperienced hackers using readily-available tools.
• Crackers: Hackers trying to break into systems for illicit purposes.
• Ethical Hackers: Professionals employed to find and fix vulnerabilities.
• Cyber Warriors: Hackers motivated by political ideologies.
• Industrial Spies: Hackers employed to steal business secrets.
• Government Agents: Hackers working on behalf of a government.
• Military Hackers: Hackers working on behalf of a military.
• These hackers have different motives, from personal gain to political purposes to espionage.

Malware Targets

• Attackers target executable files, interpreted files, kernels, services, MBRs, and hypervisors.

• Targets can vary depending on the goals of the attack.

Hiding Malware in Code

• Common methods of hiding malware include overwriting, prepending, appending, and cavity modifications

• These methods make it harder to detect the existence of malicious code.

Malware Vectors

• Malicious actors can embed malware into host programs, infect OS boot sectors, masquerade as normal programs, create independent executable code, or operate at the kernel level.

Types of Malware

• Virus: A self-replicating program attached to another program.
• Worm: A self-replicating program that spreads through networks without requiring an existing program.
• Trojan: Disguised as a legitimate program, but carries malicious software.
• Rootkit: Hides malicious activity and grants unauthorized access.
• Botnet: A network of compromised computers controlled remotely.
• Adware: Displays unwanted advertisements.
• Spyware: Gathers information about users without their knowledge.
• Ransomware: Encrypts files and demands payment for their release.
• Spam: Unsolicited electronic messages, often used to distribute malware.
• Fileless Malware: Resides in memory and doesn't create traditional files.

Malware Infection Vectors

• Malware can spread through websites, instant messages, emails, and vulnerabilities in software or systems.

• Fileless malware spreads by exploiting system tools and memory-based operations.

Symptoms of Infection

• Malware infection can cause slow performance, unusual behavior, and the appearance of unexpected files or programs.

• Symptoms in mobile devices might include battery drain, unexpected app behavior, or unusual data usage.

Prevention from Malware

• Employing strong passwords, keeping software updated, and avoiding suspicious links/programs are key defences.
• Using anti-virus software and security measures is crucial.