Malware

Question 1

Threat Vector

Answer 1

Method used by an attacker to access a victim’s machine

Question 2

Attack Vector

Answer 2

Method used by an attacker to gain access to a victim’s machine in order to infect it with malware

Question 3

Botnet

Answer 3

A collection of compromised computers under the control of a master node

Question 4

Active Interception

Answer 4

Occurs when a computer is placed between the sender and receiver and is able to capture or modify the traffic between them

Question 5

Privilege Escalation

Answer 5

Occurs when you are able to exploit a design flaw or bug in a system to gain access to resources that a normal user isn’t able to access

Question 6

Backdoors

Answer 6

Backdoors are used to bypass normal security and authentication functions

Question 7

Remote Access Trojan

Answer 7

Remote Access Trojan (RAT) is placed by an attacker to maintain persistent access

Question 8

Logic Bomb

Answer 8

Malicious code that has been inserted inside a program and will execute only when certain conditions have been met

Question 9

Easter Egg

Answer 9

Non-malicious code that when invoked, displays an insider joke, hidden message, or secret feature

Question 10

Dropper

Answer 10

Malware designed to install or run other types of malware embedded in a payload on an infected host

Question 11

Downloader

Exploit Technique

Answer 11

A piece of code that connects to the Internet to retrieve additional tools after the initial infection by a dropper

Question 12

Shellcode

Answer 12

Any lightweight code designed to run an exploit on the target, which may include any type of code format from scripting languages to binary code

Question 13

Code Injection

Answer 13

Exploit technique that runs malicious code with the identification number of a legitimate process
§ Masquerading
§ DLL injection
§ DLL sideloading
§ Process hollowing

Question 14

Living Off the Land

Answer 14

Exploit techniques that use standard system tools and packages to perform intrusions