Malware and Cyber Security Quiz

Jerusalem and the Morris Worm, both targeted these file types.

The Melissa virus is a notable example of a virus that spread through email and caused disruptions by mass-mailing.

Stuxnet is a sophisticated worm that was specifically designed to target and sabotage industrial control systems, making it an example of cyber-warfare.

<p>The Conficker malware spread through vulnerabilities and weak passwords.</p> Signup and view all the answers

<p>The ILOVEYOU virus caused an estimated $10 billion in damages.</p> Signup and view all the answers

<p>The SQL Slammer worm quickly spread across the internet causing widespread service disruptions.</p> Signup and view all the answers

<p>Financial apps worldwide.</p> Signup and view all the answers

<p>Ryuk is a powerful example of ransomware that targets large organizations and demands high ransoms.</p> Signup and view all the answers

<p>Duqu is a malware program used for espionage, gathering information from industrial systems.</p> Signup and view all the answers

<p>New fraud mechanics and commoditization of cutting-edge techniques.</p> Signup and view all the answers

<p>Frozen apps and difficulty connecting to the network.</p> Signup and view all the answers

<p>It can turn off antivirus and firewall programs.</p> Signup and view all the answers

<p>It can steal personal information.</p> Signup and view all the answers

<p>Increased CPU usage.</p> Signup and view all the answers

<p>The device might send unauthorized SMS messages.</p> Signup and view all the answers

<p>Malware constantly evolves to stay ahead of security solutions.</p> Signup and view all the answers

<p>Cabir was the first known mobile worm, and it targeted Symbian OS on Nokia devices.</p> Signup and view all the answers

<p>The 'Skulls' Trojan replaced icons on Symbian phones with skull images, rendering apps unusable.</p> Signup and view all the answers

<p>'Duts' was the first known virus to infect Windows Mobile operating systems, expanding malware threats beyond Symbian.</p> Signup and view all the answers

<p>'RedBrowser' used a Java-based Trojan that deceived users into sending premium-rate SMS messages, generating revenue for the attackers.</p> Signup and view all the answers

<p>'DroidDream' was one of the first widespread Android malware strains, found on the official Google Play Store, highlighting the need for app security measures.</p> Signup and view all the answers

<p>'Geinimi' was a sophisticated Android Trojan that could steal personal data and install other malicious apps remotely.</p> Signup and view all the answers

<p>MasterKey was an Android vulnerability. By exploiting this vulnerability, attackers could modify legitimate apps without invalidating the app's signature, effectively bypassing security checks.</p> Signup and view all the answers

<p>'XcodeGhost' infected iOS apps by targeting developers using a compromised version of Apple's Xcode IDE.</p> Signup and view all the answers

<p>Spyware spreads by exploiting software vulnerabilities, bundling itself with legitimate software, or through trojans.</p> Signup and view all the answers

<p>Adware automatically delivers advertisements, which is a distinct characteristic that differentiates it from other forms of malware.</p> Signup and view all the answers

<p>Adware/Spyware bundles are more dangerous because spyware is capable of tracking user activity and stealing information, whereas Adware is solely designed to deliver advertisements.</p> Signup and view all the answers

<p>Ransomware holds a computer system captive while demanding a ransom. It restricts user access to the computer by either encrypting files on the hard drive or locking down the system, displaying messages that force the user to pay the malware creator to remove it.</p> Signup and view all the answers

<p>SQL Slammer exploited a known buffer overflow vulnerability in Microsoft SQL Server 2000's server resolution service. It was able to infect a vulnerable population in less than 10 minutes due to its fast replication rate.</p> Signup and view all the answers

<p>Worms spread by using network services and exploiting vulnerabilities like buffer overflows. They can also spread through the user downloading a malicious file that contains the worm.</p> Signup and view all the answers

<p>The SQL Slammer Worm exploited a buffer overflow vulnerability in the Server Resolution Service of SQL Server 2000. A patch for this vulnerability was released in July 2002 as part of Bulletin MS02-39.</p> Signup and view all the answers

<p>A virus infects a computer system and spreads by attaching itself to other executable programs. A worm spreads between computers autonomously and infects systems through networks.</p> Signup and view all the answers

<p>Malware can achieve persistence by storing code in the system registry.</p> Signup and view all the answers

<p>Reflective DLL injection injects malicious code into legitimate processes, which allows the malware to avoid detection by traditional security measures and potentially steal data, execute commands, or mine cryptocurrency.</p> Signup and view all the answers

<p>Spyware gathers confidential information about a user and relays it to third parties. It is typically installed without user consent disguised as a legitimate app or by infecting a legitimate app.</p> Signup and view all the answers

<p>Spyware can gather contacts, location data, messaging habits, browsing history, preferences, downloads, device information like OS version, product ID, IMEI number, and IMSI number.</p> Signup and view all the answers

<p>Mobile trojans infect devices by attaching themselves to seemingly harmless apps and then carry out malicious actions such as hijacking the browser, sending unauthorized texts, or stealing login information.</p> Signup and view all the answers

<p>Mobile trojans are typically installed alongside legitimate apps, while mobile viruses can infect devices through various means like malicious links or infected files. Both can carry out harmful actions on the device.</p> Signup and view all the answers

<p>Mobile phishing employs fake websites designed to look legitimate to steal user credentials or other sensitive information, similar to how phishing is carried out on desktop computers, but uses smaller screens to potentially hide deceptive tactics.</p> Signup and view all the answers

<p>Mobile phishing can be done using rogue mobile apps disguised as system updates or marketing offers. These apps could then steal user credentials like bank login information.</p> Signup and view all the answers

<p>Malware can hide within code using methods like prepending, appending, and cavity malware insertion. Prepending places malware before the targeted executable, appending places it after, and cavity malware inserts it into empty spaces within the executable.</p> Signup and view all the answers

<p>Malware can achieve persistence by using &quot;auto-start&quot; methods, such as adding itself to the Startup folder, modifying system files like WIN.INI or SYSTEM.INI, or using system startup scripts to run itself on system boot.</p> Signup and view all the answers

<p>A packer is a tool used to compress, encrypt, and obfuscate malware, making it harder for antivirus software to identify and detect it. This process often involves techniques like polymorphism, anti-debugging, and adding junk code, further complicating analysis.</p> Signup and view all the answers

<p>Mobile malware can operate in the background by hiding itself in the device's processes and using hidden code to perform actions like monitoring user activity, stealing data, or sending information to the attacker.</p> Signup and view all the answers

<p>A botnet is a network of infected computers or devices controlled by an attacker, creating a distributed system for malicious activities. Advanced malware can use botnets to achieve greater impact by coordinating attacks, distributing malware, and launching DDoS attacks.</p> Signup and view all the answers

<p>A hypervisor manages and controls virtual machines, allowing multiple operating systems to run simultaneously on a single physical machine. Attacking the hypervisor can enable attackers to control all virtualized systems running on that machine, making it a high-value target.</p> Signup and view all the answers

<p>Two main stages of a malware attack are targeting and exploitation. The attacker must first identify and target specific susceptible systems or vulnerabilities. Once targeted, the attacker exploits those weaknesses to gain access to the victim's system or steal sensitive data.</p> Signup and view all the answers

<p>Malware can compromise the integrity of personal data by corrupting or deleting it. It can also be used to spread misinformation, steal personal identities, or manipulate data for malicious purposes.</p> Signup and view all the answers

Attacks exploiting vulnerabilities before developers fix them.

The first known mobile worm, targeting Symbian OS via Bluetooth.

A mobile worm that spread via MMS and Bluetooth on Symbian devices.

Ad fraud malware that infected millions of Android devices.

Widespread Android malware found in official Google Play apps.

Sophisticated spyware for iOS and Android, used in targeted surveillance.

An Android vulnerability allowing attackers to modify apps undetected.

A sophisticated Android Trojan that steals data from infected devices.

A DOS virus that infected .exe and .com files, activating on Fridays the 13th.

A worm that infected Windows machines and spread through email, known for spoofing addresses.

Considered the first major internet-based worm, spread in the late 80s.

A boot sector virus that activated on March 6, damaging computers' data.

One of the first ransomware attacks, demanding payment to restore encrypted filenames.

A mass-mailing macro virus spreading through email, causing disruptions in 1999.

A sophisticated worm targeting Iran’s nuclear program to sabotage industrial control systems.

A ransomware targeting large organizations, demanding significant ransom payments.

Malware stores code in the registry for persistence.

Injects malicious code into legitimate processes, making detection hard.

Secretly gathers personal data from users without consent.

Spyware that primarily targets users for advertising purposes.

Infects devices by attaching to harmless apps and performs malicious actions.

Fraudulent sites that steal user credentials on mobile devices.

Trojanized apps that disguise malicious intent as updates or offers.

Spyware collects device details for future attacks.

Malicious software that targets mobile devices, hiding and operating in the background.

Malware that runs invisibly, executing tasks without user awareness.

The specific applications or systems that malware seeks to exploit.

Malware that replaces legitimate code in an executable file.

Adding malicious code to the end of an executable file.

Malware that hides within the structure of a legitimate executable file.

Tools that compress, encrypt or modify malware to evade detection.

Specific files and directories where malware can set itself to run at startup.

An exploitation vulnerability where a program writes more data to a buffer than it can hold.

A computer worm that exploited SQL Server 2000's buffer overflow vulnerability.

Malware that secretly monitors user activity and collects information without consent.

Combined malware that includes adware and spyware, posing greater risks to user privacy.

Malware that holds a computer hostage, demanding a ransom for access restoration.

A group of systems or servers that are susceptible to specific exploits or attacks.

The process of converting data into a coded format to prevent unauthorized access.

An Android banking Trojan designed to steal login credentials and intercept SMS-based two-factor authentication.

The progression from simple threats to sophisticated spyware, banking Trojans, and ransomware.

Malware can steal personal information, delete files, and perform click fraud.

Common signs include blue screens, increased CPU usage, and slow performance.

Stability issues such as frozen apps, battery drainage, and unauthorized SMS messages.

The ongoing battle between malware creators and security vendors, leading to new fraud mechanics.

Cutting-edge malware techniques becoming mainstream, allowing widespread use.

Malware can send emails/messages automatically without user knowledge and modify system settings.