Malware is malicious software that is designed to "disrupt or steal sensitive data from devices, posing a threat to individuals and businesses alike."
Types of malware:
File Infector: Attaches to legitimate .exe files and spreads
- Modified PE signatures/sections, file manipulation Trojan: Disguises as real software while creating backdoors
- Network and system access, process injection Adware: Displays unwanted ads/redirects websites
- Network connections to ad servers, browser modification Ransomware: Encrypts files to force users to pay
- Encryption packages, mass filesystem access Worm: Self-replicating malware that spreads via networks
- Network scanning, self-copying Spyware: Log user keystrokes and personal information
- Network connections, key-logging, browser injection Botnet: Backdoor to perform distributed tasks (DDoS/Crypto)
- Network command & control, system info gathering Remote Access Trojan (RAT): Disguise as program to gain full access
- Full data exfiltration, key-logging, network, screenshots
Sources: Slides 1 Group 1