Malware: Types, Evolution & Prevention

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to Lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

A company discovers that sensitive customer data has been stolen due to employees clicking on links in phishing emails. Besides implementing email filters, what additional security measure would MOST effectively prevent future incidents of this nature?

  • Enforcing a policy requiring all employees to use password managers for their work accounts.
  • Deploying a network intrusion detection system to monitor for suspicious network activity.
  • Implementing mandatory two-factor authentication for all internal systems.
  • Conducting regular security awareness training for employees, focusing on identifying phishing attempts. (correct)

An organization wants to protect its web servers from SQL injection attacks. Which strategy provides the MOST direct and effective mitigation?

  • Enabling HTTPS on all web pages to encrypt communication between the client and server.
  • Regularly updating the operating system of the web server.
  • Installing a web application firewall (WAF) with pre-configured SQL injection rules.
  • Implementing input validation and parameterized queries in the web application code. (correct)

A user notices their computer is running slower than usual and they see unfamiliar pop-up ads. Their antivirus software is up to date and running. What should be the user's NEXT step in investigating this issue?

  • Run a full system scan with a different antivirus program or a dedicated anti-malware tool.
  • Immediately disconnect the computer from the internet to prevent further potential damage.
  • Reinstall the operating system to ensure all malware is removed.
  • Check the browser's installed extensions and remove any unfamiliar or suspicious ones. (correct)

A company is concerned about the risk of employees reusing passwords across multiple work and personal accounts. Which of the following security measures would BEST address this concern?

<p>Providing employees with a company-approved password manager and training on its proper use. (C)</p> Signup and view all the answers

A small business owner is setting up a public Wi-Fi network for customers. What is the MOST important security measure they should implement to protect customer data?

<p>Advising customers to use a Virtual Private Network (VPN) while connected to the Wi-Fi. (B)</p> Signup and view all the answers

An organization is exploring options to enhance the security of remote access to its internal network. While a basic firewall is already in place, which of the following additional security measures would provide the MOST robust protection against unauthorized access?

<p>Deploying a virtual private network (VPN) that requires multi-factor authentication (MFA). (A)</p> Signup and view all the answers

A web developer discovers a zero-day vulnerability in a popular JavaScript library used by their company's website. What is the MOST appropriate immediate action they should take?

<p>Immediately notify the library vendor and apply any available workarounds or mitigations. (C)</p> Signup and view all the answers

A company wants to improve its defenses against ransomware attacks. In addition to regularly backing up data, which of the following security measures would be MOST effective in preventing initial infection?

<p>Implementing a strict application whitelisting policy to only allow approved software to run. (D)</p> Signup and view all the answers

A user receives an email claiming to be from their bank, requesting them to update their account information by clicking on a link. The email looks very legitimate, with the bank's logo and branding. Which of the following actions should the user take to BEST protect themselves from a potential phishing attack?

<p>Independently visit the bank's website by typing the address into the browser and logging in to their account. (D)</p> Signup and view all the answers

An organization is implementing Single Sign-On (SSO) for its cloud applications. What is the MOST significant security risk associated with using SSO, and what measure can best mitigate it?

<p>Reliance on a single point of failure; implementing multi-factor authentication (MFA) for SSO access. (D)</p> Signup and view all the answers

A company discovers that several IoT devices on its network have been compromised and are being used to launch DDoS attacks. What is the FIRST step the company should take to contain the incident and prevent further damage?

<p>Immediately disconnect all IoT devices from the network to prevent further participation in the DDoS attacks. (C)</p> Signup and view all the answers

A security analyst is investigating a potential data breach. They notice that a large amount of data was exfiltrated from a database server shortly after a successful SQL injection attack. What is the MOST important action the analyst should take NEXT?

<p>Analyze the exfiltrated data to determine the scope of the breach and identify any sensitive information that was compromised. (B)</p> Signup and view all the answers

A company wants to implement a secure method for employees to access internal resources when working remotely. Which combination of technologies provides the MOST secure solution?

<p>A virtual private network (VPN) with multi-factor authentication (MFA). (B)</p> Signup and view all the answers

A security engineer is setting up a new web server and wants to ensure that all connections to the server are encrypted. What is the BEST way to achieve this?

<p>Configure the web server to use HTTPS and obtain a valid SSL/TLS certificate. (B)</p> Signup and view all the answers

A user notices that their web browser is redirecting them to unfamiliar websites and displaying unusual search results. What type of malware is MOST likely causing this issue?

<p>Adware/Browser Hijacker (A)</p> Signup and view all the answers

Flashcards

Malware

Malicious software that uses social engineering to trick users into installing it, often through phishing or fake updates.

Zero-Day Exploits

Exploitation of unknown software flaws by malware before patches are available.

Modern Ransomware

Malware that steals data then encrypts it, demanding ransom to prevent data leaks.

Antivirus software

Software that scans for known threats.

Signup and view all the flashcards

Firewalls

Software or hardware preventing unauthorized network access.

Signup and view all the flashcards

Intrusion Detection Systems (IDS)

Systems that detect and alert you to suspicious activity on a network.

Signup and view all the flashcards

Unencrypted Public Wi-Fi

A network that allows attackers to intercept your unsecured data.

Signup and view all the flashcards

Keyloggers

Software or hardware that records your keystrokes.

Signup and view all the flashcards

Guest Modes

A temporary account on a public computer that wipes data after use.

Signup and view all the flashcards

ARPANET (1969)

A U.S. military network, the precursor to the modern internet.

Signup and view all the flashcards

Internet Service Providers (ISPs)

Connects you to the internet, assigning IP addresses and managing DNS.

Signup and view all the flashcards

ICANN

Oversees IP addresses and domain names to ensure the internet runs smoothly.

Signup and view all the flashcards

End-to-End Encryption

Data is encrypted from sender to receiver, unreadable by intermediaries.

Signup and view all the flashcards

Multi-Factor Authentication (MFA)

Combines two or more verification methods:

Signup and view all the flashcards

Password Managers

Creates and stores strong, unique passwords to prevent password reuse.

Signup and view all the flashcards

Study Notes

  • Malware spreads through social engineering tactics like phishing emails and fake software updates.
  • Avoid clicking unsolicited links or downloading unverified files to prevent malware infections.

Zero-Day Exploits

  • These are software flaws unknown to vendors, exploited by malware before patches are available.
  • The Stuxnet worm (2010) is an example, targeting industrial systems with zero-day vulnerabilities.

Ransomware Evolution

  • Modern ransomware steals data before encryption, threatening leaks if ransoms aren't paid.
  • Maze ransomware (2019) combined data encryption with theft.

Prevention Tools

  • Antivirus software scans for known threats.
  • Firewalls block unauthorized network access.
  • Intrusion Detection Systems (IDS) signal suspicious network activity.
  • Keeping software updated is a best practice to patch vulnerabilities.
  • Over 500 million malware variants were detected in 2022.

Public Wi-Fi Dangers

  • Unencrypted public Wi-Fi allows interception of data like passwords.
  • Using a VPN (Virtual Private Network) encrypts internet traffic.

Keylogger Risks

  • Public computers might have keyloggers to record keystrokes.
  • Use on-screen keyboards or two-factor authentication as countermeasures.

Guest Modes

  • Some public computers provide temporary accounts which wipe data after use.
  • Always use incognito/private browsing modes, and log out completely.
  • Avoid accessing bank accounts or personal email on public devices, use a secure connection on your phone instead.
  • 60% of public Wi-Fi users do not use VPNs.

Internet Origins

  • The internet began with ARPANET (1969), a U.S. military network, and the World Wide Web (1989) by Tim Berners-Lee.

Role of ISPs

  • Internet Service Providers (ISPs) connect users to the internet, assigning IP addresses and managing DNS.

Internet Governance

  • ICANN oversees IP addresses and domain names.

IPv6 and IoT

  • IPv6 provides sufficient addresses to support the expanding Internet of Things (IoT).
  • Only 42% of Google users were using IPv6 in 2023.

DNS Basics

  • DNS caching speeds up website access by remembering lookups.
  • DNSSEC secures DNS to prevent spoofing attacks.
  • Global internet penetration reached 66% in 2023.

End-to-End Encryption

  • With this security measure data is encrypted from sender to receiver, unreadable by intermediaries.
  • WhatsApp messages use end-to-end encryption.

Browser Protections

  • Sandboxing isolates web pages to limit potential malware damage.
  • Anti-tracking tools block trackers, like cookies, that monitor online activity.

Web Attacks

  • Cross-Site Scripting (XSS) involves running malicious scripts on visited websites.
  • SQL Injection involves attackers manipulating databases through input fields.
  • Websites should use secure coding and filters to prevent these attacks.
  • 95% of websites used HTTPS in 2023.
  • The HTTPS Everywhere extension forces secure connections.

Phishing Awareness

  • Recognize suspicious links to avoid scams through misspellings like “g00gle.com”.

Multi-Factor Authentication (MFA)

  • MFA combines factors like passwords, phones, or fingerprints.
  • Two-Factor Authentication (2FA) is a specific type of MFA that uses exactly two factors for improved security.

Password Managers

  • These create and securely store strong, unique passwords of about 20 random characters.
  • Password managers stop password reuse.

Single Sign-On (SSO)

  • SSO provides one login for multiple services.
  • If SSO is hacked, all linked accounts are at risk.
  • This method uses biometrics or hardware keys like YubiKey in place of passwords.
  • Microsoft supports passwordless logins.
  • 2FA reduces account takeovers by 99.9%.

Encryption Explained

  • Symmetric encryption uses one key, such as AES for fast encryption.
  • Asymmetric encryption uses public/private key pairs, such as RSA for HTTPS.
  • HTTPS combines both symmetric and asymmetric encryption.
  • Most breaches (81% per Verizon’s 2023 report) result from weak passwords or phishing attacks, demonstrating human error.
  • User training can help end users spot scams and use strong credentials.
  • Smart devices often have weak passwords or lack updates.
  • The Mirai botnet (2016) hijacked IoT devices for a massive attack.
  • Online activity can be tracked.
  • Privacy extensions like uBlock Origin block trackers.
  • Stolen data from breaches fuels identity theft.
  • Regularly check credit reports for suspicious activity.

Studying That Suits You

Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

Quiz Team

More Like This

Use Quizgecko on...
Browser
Open
Browser
Browser