1.1 Malware

Página 1

Viruses and Worms

- Can replicate itself from device to device

- Maintian anti viruse signature list

Program virus- Part of an application

Boot Sector

Script Virus- part of operating system

Worms- can move itself between system, using only network, can possibly be filtered wth fire wall

Wannacry worm- vulerality in microsoft SMB version 1

Ransomware and Crypto-Malware

Ransomware- encrypts everything on the computer, decrypts for money.

Crypto-Malware- new gen of ransomware, encrypts all data files, everything except OS so you can send them bitcoin. Can avoid this by backing up all your data. Offline is best .

Takes advantage of known vulnerability. Update Antivirus.

Trojans and RATs

Trojan- looks like something other than Malware, can be stoped by Anti-virus. Gets into computer then opens a back door to your OS so other apps can commnicate directly to your computer.

Remote Access Trojan- malware installs in server/service/host. Could set up: key logger, screen recording,copy files

Rootkits

Rootkit- highest level user on unix device, modifies kernel of system ( wont see in task manager). Often combined with other software so it cannot be removed.

Mostly in kernel. Need VERY specific Rootkit removed

Key Loggers

saving all key strokes to file, sends file to bad guys. circumvents encryption.

clipboard logging, screen logging, instant messaging , search engine queries

Adware and Spyware (MONEY)

Adware- Pop ups

Spyware- watches websites, identity theift, affiliate fruad. Tricks you into installing it, looks like security sware or Peer to Peer , could install key loggers.

Botnet (Robot Network)

Robot in computer

-Once machine is infected it becomes a bot.

-Gets access via trojan horse

botnet instals itself and waits for commands from centralize command and control system .

-can have all bots act simotaneously

Página 2