Malware Flashcards
What is Malware?
Any software intentionally designed to cause damage to a computer, server or computer network
What is Malware distribution technique -
Clickjacking?
Tricking users into downloading malware with seemingly innocuous objects.
What is Malware distribution technique -
Spear phishing?
phishing directed at specific individuals or organizations.
What is Malware distribution technique -
Malvertising?
Injecting malicious advertisements into legitimate online advertising networks
What is Malware distribution technique -
Compromised websites?
Distributing malware through a compromised website
What is Malware distribution technique -
Drive-by downloads?
Downloads that happens without users knowledge or understanding of consequences
What is a Virus?
Requires user spread via the transfer of the infected files or programs.
What is a Worm?
self-spreading malware
What is Ransomware?
Hackers restrict access to files and folders on the target system until a payment is made.
What is a backdoor?
Provides access to a computer program that bypasses security mechanisms
What is a Macro Virus?
Written in a macro language (e.g: VBA) and that is platform independent.
What is a Compression Virus?
A virus could be easily detected if the infected version of a program is longer than the corresponding uninfected one. – To thwart such attempts, viruses are also typically coded to compress the targeted executable file so that both the infected and uninfected versions are of identical length.
What is a Stealth Virus?
Any virus that avoids detection by antivirus software by design or accident, sometimes occurs because the virus is new or because users haven’t updated their antivirus software
Code modification. To avoid detection, the virus modifies the code and virus signature of every infected file.
Data encryption. The virus renders the affected file inaccessible or unreadable to the user by encrypting it and also by using a different encryption key for different files
What is a Polymorphic Virus?
Produces varied but operational copies of itself. A polymorphic virus may have no parts that remain identical between infections, making it very hard to detect using signatures.
What is a Multipart Virus?
Attempts to infect both boot sector and files; generally refers to viruses with multiple infection methods
