Podcast
Questions and Answers
What is a common technique used to trick users into clicking on malicious links?
What is a common technique used to trick users into clicking on malicious links?
- Malvertising
- Social Engineered Click-jacking (correct)
- Drive-by Downloads
- Spearphishing Sites
Which of the following is NOT considered a type of malware?
Which of the following is NOT considered a type of malware?
- Trojan Horse
- Firewall (correct)
- Spyware
- Worm
What can Trojans do to a victim's computer?
What can Trojans do to a victim's computer?
- Encrypt files for recovery
- Improve system performance
- Create backup copies of files
- Replace or delete critical operating system files (correct)
Which of these is a way malware can enter a computer system?
Which of these is a way malware can enter a computer system?
What is Blackhat Search Engine Optimization (SEO) primarily used for?
What is Blackhat Search Engine Optimization (SEO) primarily used for?
What is the purpose of a wrapper in the context of Trojans?
What is the purpose of a wrapper in the context of Trojans?
Which component is installed on the victim's machine for Command Shell Trojans?
Which component is installed on the victim's machine for Command Shell Trojans?
What type of Trojan allows a hacker to have complete GUI access to a victim's machine?
What type of Trojan allows a hacker to have complete GUI access to a victim's machine?
What is a key step in creating a Botnet Trojan?
What is a key step in creating a Botnet Trojan?
Which technique is used to evade anti-virus detection in Trojans?
Which technique is used to evade anti-virus detection in Trojans?
What is the first stage of a virus's life cycle?
What is the first stage of a virus's life cycle?
Which of the following actions can lead to a computer getting infected by a virus?
Which of the following actions can lead to a computer getting infected by a virus?
What is a common characteristic of viruses?
What is a common characteristic of viruses?
What purpose does encryption serve in encryption viruses?
What purpose does encryption serve in encryption viruses?
Which reason commonly motivates individuals to create computer viruses?
Which reason commonly motivates individuals to create computer viruses?
What is a key difference between viruses and computer worms?
What is a key difference between viruses and computer worms?
Which stage involves developers creating defensive measures against a virus?
Which stage involves developers creating defensive measures against a virus?
What can be a consequence of computer worms carrying a payload?
What can be a consequence of computer worms carrying a payload?
What action should be avoided to minimize the risk of virus infection?
What action should be avoided to minimize the risk of virus infection?
A wrapper binds a Trojan executable with an innocent looking application, making it appear safe to users.
A wrapper binds a Trojan executable with an innocent looking application, making it appear safe to users.
Evasive techniques for Trojans include combining the Trojan file with legitimate software without any modification.
Evasive techniques for Trojans include combining the Trojan file with legitimate software without any modification.
Command shell Trojans provide the attacker complete graphical user interface access to the victim's machine.
Command shell Trojans provide the attacker complete graphical user interface access to the victim's machine.
Botnet Trojans are designed to infect numerous computers and create a controlled network of bots.
Botnet Trojans are designed to infect numerous computers and create a controlled network of bots.
Remote Access Trojans do not require any initial infection on the victim's machine to provide access.
Remote Access Trojans do not require any initial infection on the victim's machine to provide access.
Malware can give full control of computer systems to the malware creator.
Malware can give full control of computer systems to the malware creator.
Trojan Horses can only infect systems through downloading files from untrusted sites.
Trojan Horses can only infect systems through downloading files from untrusted sites.
Blackhat SEO is a technique to improve the ranking of malware pages in search results.
Blackhat SEO is a technique to improve the ranking of malware pages in search results.
Drive-by downloads happen when a user clicks on a link to install malware.
Drive-by downloads happen when a user clicks on a link to install malware.
Compromised legitimate websites can host embedded malware that spreads to unsuspecting visitors.
Compromised legitimate websites can host embedded malware that spreads to unsuspecting visitors.
A virus is a self-replicating program that can spread by attaching itself to other programs.
A virus is a self-replicating program that can spread by attaching itself to other programs.
Computer worms require human interaction to spread across network connections.
Computer worms require human interaction to spread across network connections.
Encryption viruses use a single key to encrypt their code for all infected files.
Encryption viruses use a single key to encrypt their code for all infected files.
The stage of virus life that involves it being activated by user actions is known as Launch.
The stage of virus life that involves it being activated by user actions is known as Launch.
Opening infected email attachments can result in a computer becoming infected by viruses.
Opening infected email attachments can result in a computer becoming infected by viruses.
Trojans are typically safe to download if they are from the web.
Trojans are typically safe to download if they are from the web.
The first stage of a virus's life cycle involves replication.
The first stage of a virus's life cycle involves replication.
A virus can corrupt files and programs as part of its characteristics.
A virus can corrupt files and programs as part of its characteristics.
People create computer viruses solely for research purposes.
People create computer viruses solely for research purposes.
Antivirus software can directly detect encryption viruses using signature detection methods.
Antivirus software can directly detect encryption viruses using signature detection methods.
Which malware type is specifically designed to give hackers backdoor access to a system?
Which malware type is specifically designed to give hackers backdoor access to a system?
What method involves exploiting browser flaws to install malware without user consent?
What method involves exploiting browser flaws to install malware without user consent?
Which of the following describes blackhat search engine optimization?
Which of the following describes blackhat search engine optimization?
Which technique involves tricking users into interacting with seemingly innocent webpages to distribute malware?
Which technique involves tricking users into interacting with seemingly innocent webpages to distribute malware?
What is the primary threat posed by a rootkit?
What is the primary threat posed by a rootkit?
What is the primary function of a dropper in the context of Trojan techniques?
What is the primary function of a dropper in the context of Trojan techniques?
What is a common characteristic of Botnet Trojans?
What is a common characteristic of Botnet Trojans?
Which of the following is NOT a step in the process of creating a Trojan wrapper?
Which of the following is NOT a step in the process of creating a Trojan wrapper?
What tactic is often employed by attackers to evade anti-virus detection of Trojans?
What tactic is often employed by attackers to evade anti-virus detection of Trojans?
What is the purpose of a Reverse Connecting Trojan installed on a victim's computer?
What is the purpose of a Reverse Connecting Trojan installed on a victim's computer?
What is one common method for a computer to get infected by a virus?
What is one common method for a computer to get infected by a virus?
Which stage of a virus's life cycle involves the virus spreading itself within the system?
Which stage of a virus's life cycle involves the virus spreading itself within the system?
What best describes a computer worm?
What best describes a computer worm?
What is a primary characteristic of viruses?
What is a primary characteristic of viruses?
What is a common motivation behind creating computer viruses?
What is a common motivation behind creating computer viruses?
Which method can be employed to avoid detection by antivirus software?
Which method can be employed to avoid detection by antivirus software?
What happens during the elimination stage of a virus's life cycle?
What happens during the elimination stage of a virus's life cycle?
What technology is generally ineffective against encryption viruses?
What technology is generally ineffective against encryption viruses?
What is one likely consequence of a computer worm carrying a payload?
What is one likely consequence of a computer worm carrying a payload?
What is an effect of using Trojans downloaded from the internet?
What is an effect of using Trojans downloaded from the internet?
A computer worm can spread across networks without human interaction.
A computer worm can spread across networks without human interaction.
Trojans are a type of virus that requires human action to be activated.
Trojans are a type of virus that requires human action to be activated.
Viruses can only infect documents but not executable programs.
Viruses can only infect documents but not executable programs.
Encryption viruses use the same key for all infected files.
Encryption viruses use the same key for all infected files.
Antivirus software can identify all types of viruses effectively.
Antivirus software can identify all types of viruses effectively.
People create computer viruses solely for financial benefits.
People create computer viruses solely for financial benefits.
The detection stage of a virus's life cycle is when antivirus software identifies the threat.
The detection stage of a virus's life cycle is when antivirus software identifies the threat.
File downloads are a common way for viruses to spread.
File downloads are a common way for viruses to spread.
Computer worms often carry a payload that can damage the host system.
Computer worms often carry a payload that can damage the host system.
Changing the checksum of a Trojan can help in evading detection by antivirus software.
Changing the checksum of a Trojan can help in evading detection by antivirus software.
Malware can damage computer systems and provide control to the malware creator.
Malware can damage computer systems and provide control to the malware creator.
Drive-by downloads require a user to click on a link to install malware.
Drive-by downloads require a user to click on a link to install malware.
Compromised legitimate websites can distribute malware to unsuspecting visitors.
Compromised legitimate websites can distribute malware to unsuspecting visitors.
A Trojan Horse can replicate itself without any user interaction.
A Trojan Horse can replicate itself without any user interaction.
Blackhat SEO is a technique used to rank legitimate websites higher in search results.
Blackhat SEO is a technique used to rank legitimate websites higher in search results.
A wrapper combines a Trojan executable with an innocent looking application to deceive users.
A wrapper combines a Trojan executable with an innocent looking application to deceive users.
Command shell Trojans provide complete GUI access to the victim's machine.
Command shell Trojans provide complete GUI access to the victim's machine.
Botnet Trojans are designed to control a large network of infected computers.
Botnet Trojans are designed to control a large network of infected computers.
Evasive techniques for Trojans always involve significant modifications to the Trojan file.
Evasive techniques for Trojans always involve significant modifications to the Trojan file.
Remote Access Trojans do not require initial infection on the victim's machine.
Remote Access Trojans do not require initial infection on the victim's machine.
A dropper installs a Trojan by binding it with an application that appears harmless to the user.
A dropper installs a Trojan by binding it with an application that appears harmless to the user.
Remote Access Trojans provide attackers with limited functionality and minimal access to the victim's system.
Remote Access Trojans provide attackers with limited functionality and minimal access to the victim's system.
Botnet Trojans are created to infect only a small number of systems for personal use.
Botnet Trojans are created to infect only a small number of systems for personal use.
Changing the Trojan's syntax to an innocent file type, such as .DOC.EXE, is a known evasion technique.
Changing the Trojan's syntax to an innocent file type, such as .DOC.EXE, is a known evasion technique.
The primary purpose of command shell Trojans is to install benign applications on the victim's machine.
The primary purpose of command shell Trojans is to install benign applications on the victim's machine.
Trojans can only infect systems through downloading files from untrusted sites.
Trojans can only infect systems through downloading files from untrusted sites.
Drive-by downloads occur when a user clicks on a link to install malware.
Drive-by downloads occur when a user clicks on a link to install malware.
Blackhat SEO is a technique used to rank malware pages highly in search results.
Blackhat SEO is a technique used to rank malware pages highly in search results.
Computer worms are designed to spread across network connections without human interaction.
Computer worms are designed to spread across network connections without human interaction.
Viruses can only attach themselves to documents and cannot infect programs.
Viruses can only attach themselves to documents and cannot infect programs.
A virus can be activated by the user's actions, such as running an infected program.
A virus can be activated by the user's actions, such as running an infected program.
Trojans can easily be detected by any antivirus program if they are downloaded from trusted sites.
Trojans can easily be detected by any antivirus program if they are downloaded from trusted sites.
Encryption viruses use multiple keys to encrypt their code for different infected files.
Encryption viruses use multiple keys to encrypt their code for different infected files.
The incorporation stage of a virus's life cycle is when it starts replicating in the target system.
The incorporation stage of a virus's life cycle is when it starts replicating in the target system.
Vandalism is one of the reasons people may create computer viruses.
Vandalism is one of the reasons people may create computer viruses.
Opening a file received through email can lead to a computer getting infected by a virus.
Opening a file received through email can lead to a computer getting infected by a virus.
Once a Trojan infects a machine, it cannot extract data or give hackers control of the system.
Once a Trojan infects a machine, it cannot extract data or give hackers control of the system.
The design stage of a virus's life cycle involves creating virus code.
The design stage of a virus's life cycle involves creating virus code.
Malware can impair or disable computer systems and can also afford complete access to them.
Malware can impair or disable computer systems and can also afford complete access to them.
Drive-by downloads occur when users click on links that automatically install malware.
Drive-by downloads occur when users click on links that automatically install malware.
Trojan Horses can only infect systems through downloading files from trustworthy sites.
Trojan Horses can only infect systems through downloading files from trustworthy sites.
Blackhat search engine optimization is a tactic to make legitimate sites rank higher in search results.
Blackhat search engine optimization is a tactic to make legitimate sites rank higher in search results.
Compromised legitimate websites may host malware that can spread to visitors without their knowledge.
Compromised legitimate websites may host malware that can spread to visitors without their knowledge.
A wrapper can only bind a Trojan executable with applications that are .EXE in format.
A wrapper can only bind a Trojan executable with applications that are .EXE in format.
Evasive techniques for Trojans aim to manipulate users into believing the Trojan is a legitimate application without any modification to the Trojan file itself.
Evasive techniques for Trojans aim to manipulate users into believing the Trojan is a legitimate application without any modification to the Trojan file itself.
Remote Access Trojans allow hackers to gain complete control over the GUI interface of the victim's machine after establishing a reverse connection.
Remote Access Trojans allow hackers to gain complete control over the GUI interface of the victim's machine after establishing a reverse connection.
Botnet Trojans are designed solely for personal attacks against single users and do not involve network creation.
Botnet Trojans are designed solely for personal attacks against single users and do not involve network creation.
Command shell Trojans provide access to only a graphical interface of the victim's machine.
Command shell Trojans provide access to only a graphical interface of the victim's machine.
Encryption viruses use a different key for each infected file to encipher their code.
Encryption viruses use a different key for each infected file to encipher their code.
The 'Launch' stage of a virus's life cycle occurs when the virus self-replicates.
The 'Launch' stage of a virus's life cycle occurs when the virus self-replicates.
People create computer viruses only for damage and vandalism.
People create computer viruses only for damage and vandalism.
Trojans can inflict damage to systems but are generally not self-replicating.
Trojans can inflict damage to systems but are generally not self-replicating.
Compromised legitimate websites can host embedded malware that does not spread to visitors.
Compromised legitimate websites can host embedded malware that does not spread to visitors.
The incorporation stage of a virus's life cycle involves identifying it as a threat.
The incorporation stage of a virus's life cycle involves identifying it as a threat.
A key characteristic of a virus is its ability to transform itself.
A key characteristic of a virus is its ability to transform itself.
A wrapper combines a Trojan executable with an innocent application to make it appear safe.
A wrapper combines a Trojan executable with an innocent application to make it appear safe.
What is a primary function of malware like Trojans aside from theft?
What is a primary function of malware like Trojans aside from theft?
Which method represents a way that malware can be introduced through legitimate sources?
Which method represents a way that malware can be introduced through legitimate sources?
Which of the following techniques is intended to disguise malicious activity online?
Which of the following techniques is intended to disguise malicious activity online?
What is a significant risk associated with compromised legitimate websites?
What is a significant risk associated with compromised legitimate websites?
In the context of Trojans, what is the purpose of a dropper?
In the context of Trojans, what is the purpose of a dropper?
What is the primary purpose of a dropper in Trojan techniques?
What is the primary purpose of a dropper in Trojan techniques?
Which technique involves modifying the Trojan's code to avoid detection by anti-virus software?
Which technique involves modifying the Trojan's code to avoid detection by anti-virus software?
What characteristic distinguishes Botnet Trojans from other types of Trojans?
What characteristic distinguishes Botnet Trojans from other types of Trojans?
What key function does a Reverse Connecting Trojan serve?
What key function does a Reverse Connecting Trojan serve?
In the context of wrappers, what is a significant feature that helps disguise Trojans?
In the context of wrappers, what is a significant feature that helps disguise Trojans?
What is a primary characteristic of computer worms compared to viruses?
What is a primary characteristic of computer worms compared to viruses?
In what stage of a virus's life cycle does antivirus software developers create defenses?
In what stage of a virus's life cycle does antivirus software developers create defenses?
What tactic do encryption viruses use to evade antivirus scanners?
What tactic do encryption viruses use to evade antivirus scanners?
Which of the following motivations is least common for individuals creating computer viruses?
Which of the following motivations is least common for individuals creating computer viruses?
How do users commonly expose their computers to viruses?
How do users commonly expose their computers to viruses?
What is one of the primary functions of a payload in computer worms?
What is one of the primary functions of a payload in computer worms?
Which stage of a virus's life cycle involves it being activated by user actions?
Which stage of a virus's life cycle involves it being activated by user actions?
What commonly motivates cyber terrorists to create computer viruses?
What commonly motivates cyber terrorists to create computer viruses?
Which technique is commonly employed by malware to avoid detection by antivirus software?
Which technique is commonly employed by malware to avoid detection by antivirus software?
Flashcards
Malware
Malware
Malicious software designed to damage or disable computer systems, or give attackers partial or full control, often for theft or fraud.
Trojan Horse
Trojan Horse
A type of malware that disguises itself as legitimate software to trick users into installing it, giving attackers unauthorized access.
Malware Distribution Techniques
Malware Distribution Techniques
Methods used by attackers to spread malware, including exploiting software flaws, social engineering, and malicious websites.
Malvertising
Malvertising
Signup and view all the flashcards
Trojan Attack Methods
Trojan Attack Methods
Signup and view all the flashcards
Dropper
Dropper
Signup and view all the flashcards
Wrapper
Wrapper
Signup and view all the flashcards
Command Shell Trojan
Command Shell Trojan
Signup and view all the flashcards
Remote Access Trojan (RAT)
Remote Access Trojan (RAT)
Signup and view all the flashcards
Botnet Trojan
Botnet Trojan
Signup and view all the flashcards
Computer Virus
Computer Virus
Signup and view all the flashcards
Virus Replication
Virus Replication
Signup and view all the flashcards
Virus Launch
Virus Launch
Signup and view all the flashcards
Encryption Virus
Encryption Virus
Signup and view all the flashcards
Computer Worm
Computer Worm
Signup and view all the flashcards
Worm Payload
Worm Payload
Signup and view all the flashcards
Virus Detection
Virus Detection
Signup and view all the flashcards
Virus Incorporation
Virus Incorporation
Signup and view all the flashcards
Virus Elimination
Virus Elimination
Signup and view all the flashcards
Virus Infection Methods
Virus Infection Methods
Signup and view all the flashcards
Blackhat SEO
Blackhat SEO
Signup and view all the flashcards
Social Engineered Click-jacking
Social Engineered Click-jacking
Signup and view all the flashcards
Spearphishing Sites
Spearphishing Sites
Signup and view all the flashcards
Drive-by Downloads
Drive-by Downloads
Signup and view all the flashcards
What does a wrapper do?
What does a wrapper do?
Signup and view all the flashcards
How does a Command Shell Trojan work?
How does a Command Shell Trojan work?
Signup and view all the flashcards
How does a Remote Access Trojan work?
How does a Remote Access Trojan work?
Signup and view all the flashcards
What is a Botnet?
What is a Botnet?
Signup and view all the flashcards
How can attackers evade antivirus?
How can attackers evade antivirus?
Signup and view all the flashcards
Virus
Virus
Signup and view all the flashcards
Virus Characteristics
Virus Characteristics
Signup and view all the flashcards
Virus Design
Virus Design
Signup and view all the flashcards
Botnet
Botnet
Signup and view all the flashcards
Virus Stages
Virus Stages
Signup and view all the flashcards
What is a wrapper in malware?
What is a wrapper in malware?
Signup and view all the flashcards
What does a Remote Access Trojan do?
What does a Remote Access Trojan do?
Signup and view all the flashcards
What does a virus do during replication?
What does a virus do during replication?
Signup and view all the flashcards
How does a computer get infected by a virus?
How does a computer get infected by a virus?
Signup and view all the flashcards
What is an Encryption Virus?
What is an Encryption Virus?
Signup and view all the flashcards
What is a Computer Worm?
What is a Computer Worm?
Signup and view all the flashcards
What is a Worm Payload?
What is a Worm Payload?
Signup and view all the flashcards
What are the reasons people create viruses?
What are the reasons people create viruses?
Signup and view all the flashcards
How can a Botnet be used?
How can a Botnet be used?
Signup and view all the flashcards
Virus Transmission
Virus Transmission
Signup and view all the flashcards
How to Avoid Virus Infection
How to Avoid Virus Infection
Signup and view all the flashcards
Why Do People Create Viruses?
Why Do People Create Viruses?
Signup and view all the flashcards
Trojan Horse Malware
Trojan Horse Malware
Signup and view all the flashcards
What is a wrapper?
What is a wrapper?
Signup and view all the flashcards
What does a Command Shell Trojan do?
What does a Command Shell Trojan do?
Signup and view all the flashcards
What is a Remote Access Trojan (RAT)?
What is a Remote Access Trojan (RAT)?
Signup and view all the flashcards
Virus Transmission Methods
Virus Transmission Methods
Signup and view all the flashcards
Why People Create Viruses
Why People Create Viruses
Signup and view all the flashcards
Study Notes
Malware Threats
- Malware is malicious software designed to damage or disable computer systems, giving the creator control for theft or fraud.
- Examples of malware include Trojan Horses, viruses, backdoors, worms, rootkits, spyware, ransomware, botnets, adware, and crypters.
Different Ways Malware Enters a System
- Instant messaging applications (like IRC)
- Browser and email software bugs
- Removable devices
- Attachments
- Legitimate software (potentially compromised)
- NetBIOS (file sharing)
- Fake programs
- Untrusted sites and freeware
- Downloading files, games, and screensavers
Common Attack Techniques
- Blackhat SEO: Ranking malware pages highly in search results
- Clickjacking: Tricking users into clicking on innocent-looking webpages
- Malvertising: Embedding malware in ads on legitimate sites
- Spearphishing: Mimicking legitimate institutions to steal login credentials
- Compromised legitimate websites: Hosting embedded malware that spreads to unsuspecting visitors
- Drive-by downloads: Exploiting flaws in browser software to install malware with a simple visit
How Hackers Use Trojans
- Deleting or replacing critical OS files
- Disabling firewalls and anti-virus software
- Generating fake traffic to create DOS attacks
- Recording data (screenshots, audio, video) from the victim's PC
- Using the victim's PC for spamming and blasting emails
- Downloading malicious files (spyware, adware)
- Creating backdoors for remote access
- Infecting the victim's PC as a proxy server for attacks
- Using victim's PC in botnets for DDoS attacks
- Stealing information (passwords, security codes, credit cards) using keyloggers
How to Infect Systems Using a Trojan
- Creating a new Trojan packet using a Trojan Horse Construction Kit
- Creating a dropper (part of a Trojan packet that installs malicious code on the target system)
- Example of a Dropper: Installation path: c\windows\system32\svchosts.exe, Autostart: HKLM\Software\Mic.....\run\Iexplorer.exe, client address: client.attacker.com, dropzone: dropzone.attacker.com, genuine application file name: chess.exe, wrapper data: executable file, wrapper
- Create a wrapper to install Trojan and propagate it.
- Execute the dropper.
- Execute the damage routine.
Wrappers
- Bind a Trojan executable to an innocent-looking application (like a game or office app)
- The wrapper installs the Trojan in the background, and runs the application in the foreground, when the user runs the wrapped EXE
- The programs are often combined into a single file.
- Attackers might disguise a Trojan as a greeting (like a birthday cake animation)
Command Shell Trojans
- Give remote control of a command shell on the victim's machine.
- The Trojan server is installed on the victim's machine, opening a communication port for attackers
- The attacker's client machine launches the shell.
- CLI examples:
C:\>nc <ip> <port>C:\> nc -L -p <port>
Remote Access Trojans (RATs)
- This Trojan works like a remote desktop, giving the attacker complete GUI access to the victim's system.
- The attacker gains 100% access to the target system (complete access).
- An example: Infect the victim's computer with server.exe, the Trojan connects to port 80 to the attacker (establishing a reverse connection) giving the attacker complete control.
Botnet Trojans
- Infects a large number of computers (across a geographical area) to create a network of bots controlled by a central server.
- Used to launch various attacks, such as denial-of-service attacks, spamming, click fraud, and financial information theft.
Evading Anti-Virus Techniques
- Splitting the Trojan file into multiple parts and zipping them.
- Writing your own Trojan and embedding it into an application.
- Changing the Trojan's syntax (e.g., converting EXE to VB script, changing extensions).
- Modifying the content using a hex editor, altering the checksum, or encrypting.
- Avoiding using Trojans downloaded from the web (as they can be easily detected).
Introduction to Viruses
- A virus is a self-replicating program.
- It attaches itself to other programs, boot sectors, or documents.
- Virus transmissions commonly occur through downloads, infected disks/flash drives and email attachments.
- Virus characteristics include infecting other programs, altering data, corrupting files/programs, self-replication, and encryption.
Stages of Virus Life
- Virus design and code development
- Virus replication within the target system
- Virus launch (activation) triggered by users or programs
- Virus detection by antivirus software
- Antivirus software incorporation of defenses against viruses.
- Virus elimination by users
Reasons for Creating Computer Viruses
- Inflicting damage to competitors
- Financial benefits
- Research projects
- Play pranks
- Vandalism
- Cyber terrorism
- Distributing political messages
How Computers Get Infected by Viruses
- Accepting files/downloads without proper source checking
- Opening infected email attachments
- Installing pirated software
- Not updating or installing new software versions
- Not running the latest anti-virus application
Encryption Viruses
- Encrypt the code.
- Encrypt each infected file using a unique encryption key.
- Antivirus programs can't use signature detection to find these types of viruses.
Computer Worms
- Malicious programs that replicate, execute, and spread across network connections.
- Most worms' goal is to replicate and spread.
- Some worms carry payloads to damage the host system, like installing backdoors to turn the host into a bot (zombie).
Differences Between Worms and Viruses
- Worms replicate on their own, spread through the network, and don't need to attach to other programs.
- Viruses replicate themselves and attach to other programs to spread faster.
Anti-Virus Sensor Systems
- Software that detects and analyzes malicious code.
- Usually used with other tools to monitor network traffic, suspicious files, etc.
How to Detect Trojans
- Scanning for suspicious open ports
- Scanning for suspicious startup programs
- Scanning for suspicious running processes
- Scanning for suspicious files and folders
- Scanning for suspicious registry entries
- Scanning for suspicious network activities
- Scanning for suspicious device drivers installed on the computer
- Scanning for suspicious Windows services
- Running specific Trojan scanner programs
Trojan Countermeasures
- Avoid opening email attachments from unknown senders
- Install patches and security updates
- Block unnecessary ports and use a firewall
- Harden default configuration settings and disable unused functionality.
- Monitor internal network traffic
- Scan CDs and DVDs with antivirus software.
- Restrict permissions in the desktop environment.
- Avoid blindly executing programs
- Manage local workstation file integrity using tools like checksums, audits, and port scanners
- Avoid downloading or executing from untrusted sources.
- Use host-based antivirus, firewall and intrusion detection software
Backdoor Countermeasures
- Commercial antivirus programs automatically scan and detect backdoors.
- Educate users on not installing programs from untrustworthy sources.
- Use anti-virus tools (like McAfee, Norton) to find and remove backdoors.
Virus and Worm Countermeasures
- Install anti-virus programs that scan for and remove threats.
- Carefully consider and follow instructions during internet downloads.
- Avoid opening attachments from unknown senders.
- Create anti-virus policies.
- Maintain current anti-virus programs.
- Regularly back up data.
- Do thorough scanning of disks/programs before use.
- Use pop-up blockers and internet firewalls.
Anti-virus Tools
- Provides a list of anti-virus tools and their websites
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Related Documents
Description
This quiz explores various types of malware and the different ways they can infiltrate computer systems. It also covers common attack techniques used by cybercriminals to exploit vulnerabilities. Test your knowledge on how to recognize and prevent malware threats.
