Malware

Question 1

Any software that is designed to infiltrate a computer system without the user’s knowledge.

Answer 1

Malware

Question 2

A means by which an attacker gains access to a computer to infect the system with malware.

Answer 2

Attack Vector

Question 3

Specific methods used by an attacker to infiltrate a victim’s machine.

Answer 3

Threat Vector

Question 4

Malicious software code that runs on a machine without the user’s knowledge, attaches to clean files & spreads into a computer system. This allows the code to infect the computer whenever it has been run.

Answer 4

Viruses

Question 5

Standalone malware programs that replicate & spread to other systems by exploiting software vulnerabilities. It can replicate itself without any user interaction.

Answer 5

Worm

Question 6

Malicious programs which appear to be legitimate software that allow unauthorized access to a victim’s system when executed. It is disguised as a piece of harmless or desirable software.

Answer 6

Trojans

Question 7

Encrypts a user’s data &holds it hostage until a ransom is paid to the attacker for decryption. Malicious software that is designed to block access to a computer system or its data by encrypting it until ransom is paid.

Answer 7

Ransomware

Question 8

Compromised computers or devices that are part of a botnet, remotely controlled by attackers, & used in coordination to perform tasks by remote commands.

Answer 8

Zombies

Question 9

Network of zombies (compromised computers or devices), controlled remotely by malicious actors, often used for DDos attacks, spam distribution, or cryptocurrency mining.

Answer 9

Botnet

Question 10

Malicious tools that hide their activities and operate at the OS level to allow for ongoing privileged access. Software designed to gain administrative-level control over a given computer system without being detected.

Answer 10

Rootkits

Question 11

Malicious means of bypassing normal security and authentication processes to gain unauthorized access to a system.

Answer 11

Backdoors

Question 12

Malicious embed code placed in legitimate programs that executes a malicious action when a specific condition has been met or a trigger occurs.

Answer 12

Logic Bombs

Question 13

Piece of software or hardware that records a user’s keystrokes made on a computer or mobile device & is used to capture passwords or other sensitive information.

Answer 13

Keyloggers

Question 14

Malicious software that secretly monitors & gathers users and/or organizational information or activities & sends data to third parties.

Answer 14

Spyware

Question 15

Unnecessary or pre-installed software on a new computer or smartphone that consumes system resources & space without offering any value to the user.

Answer 15

Bloatware

Question 16

Involve methods by which malware infiltrates & infects targeted systems. Describes the specific methods by which malware code infects a target host.

Answer 16

Malware Exploitation Techniques

Question 17

Stored in the first sector of a hard drive & is then loaded into memory whenever the computer boots up.

Answer 17

Boot Sector Virus

Question 18

A form of code that allows a virus to be embedded inside another document so that when that document is opened by the user, the virus is executed.

Answer 18

Macro Virus

Question 19

Tries to find executable or application files to infect with their malicious code.

Answer 19

Program Virus

Question 20

A combination of a boot Sector type virus and a program virus.

Answer 20

Multipartite Virus

Question 21

Designed to hide itself from being detected by encrypting its malicious code or payloads to avoid detection by any antivirus software.

Answer 21

Encrypted Virus

Question 22

Advanced version of an encrypted Virus, but instead of just encrypting the contents, it will actually change the virus’s code each time it is executed by altering the decryption module in order for it to evade detection.

Answer 22

Polymorphic Virus

Question 23

Able to rewrite itself entirely before it attempts to infect a given file.

Answer 23

Metamorphic Virus

Question 24

Not necessarily a specific type of virus as much as it is a technique used to prevent the virus from being detected by the anti-virus software.

Answer 24

Stealth Virus

Question 25

Have a layer of protection to confuse a program or a person who's trying to analyze it.

Answer 25

Armored Virus

Question 26

A form of technical social engineering that attempts to scare end users into taking undesirable action on their system.

Answer 26

Hoax

Question 27

Type of Trojan that is widely used by modern attackers because it provides the attacker, (threat actor), with persistent access, (remote control) of a victim's machine.

Answer 27

Remote Access Trojan (RAT)

Question 28

Backup all of important data, files, and systems.

Answer 28

Conducting Regular Backups

Question 29

Update all of the software, especially operating system & antivirus programs.

Answer 29

Installing Regular Software Updates

Question 30

Provided to end users to improve security.

Answer 30

Providing Security Awareness Training

Question 31

Provides an extra layer of security for authentication.

Answer 31

Implementing Multi-factor Authentication

Question 32

Steps to take when affected by Ransomware.

Answer 32

1. Never Pay 2. Disconnect from network 3. Notify the authorities 4. Restore systems and data from known good backups

Question 33

Responsible for managing & coordinating activities of other nodes or devices within a network.

Answer 33

Command & Control Node

Question 34

Allows a system to control access to things like device drivers, sound card, & monitor.

Answer 34

Kernel Mode (Ring Zero)

Question 35

Technique used to run arbitrary code within the address space of another process by forcing it to load a dynamic-link library.

Answer 35

DLL Injection

Question 36

Software code that is placed between two components.

Answer 36

Shim

Question 37

Insecure coding practice that was used by programmers to provide a joke or a gag gift to the users.

Answer 37

Easter Egg

Question 38

Used to create a process in the system memory without relying on the local file system of the infected host.

Answer 38

Fileless Malware

Question 39

When a user clicks on a malicious link or opens a malicious files, malware is installed.

Answer 39

Stage 1: Dropper or Downloader

Question 40

Initiates or runs other malware forms within a payload on an infected host.

Answer 40

Dropper

Question 41

Retrieves additional tools post the initial infection facilitated by a dropper.

Answer 41

Downloader

Question 42

Encompasses lightweight code meant to execute an exploit on a given target.

Answer 42

Shellcode

Question 43

Download & install a remote access Trojan to conduct command & control on the victimized system.

Answer 43

Stage 2: Downloader

Question 44

Threat actors will execute primary objectives to meet core objectives (data Exfiltration or file encryption).

Answer 44

Actions on Objective Phase

Question 45

Used to help the threat actor prolong unauthorized access to a system by hiding tracks, erasing log files, and hiding any evidence of malicious activities.

Answer 45

Concealment

Question 46

A strategy adopted by many Advanced Persistent Threats & Criminal organizations. Threat actors try to exploit the standard system tools to perform intrusions.

Answer 46

Living Off the Land