Welcome to a brand new section of malware threats.
In this lecture, we learn to describe autism, malware, different ways of malware can get into a system,
common techniques to deploy malware and components of malware.
So let's get started.
What is a malware?
Malware is a software intentionally designed to cause damage to a computer server client uninsured to
harm a system.
Malware is malicious software that damages or disables computer systems and gives limited all full control
of the systems, you might have heard of the term cyber attacks on network devices or computers.
These attacks are carried out by deploying malware on these systems.
The main intention of malware is to gain credentials, information, data breaches and obviously money.
Malware is a malicious software, including any software that acts in the interest of the user.
Malware can affect not only the infected computers, but potentially any other device the infected device
can communicate with.
So malware forms are kind of ch'ien.
Whenever you deploy a malware, it may affect other devices which are not directly affected by a man
with a few examples of malware that can be Trojans, viruses, worms, spyware as botnet Hardaway's
rootkit and Minimoog.
They are going to talk about viruses, worms, Trojans in our upcoming lectures.
So how can your system get affected because of malware?
Insecure patch management, what does that mean?
Whenever I use this term download update patches for software is the website from which the software
are being downloaded.
If the website is infectious or it is attacked by an attacker, instead of downloading a patch, you
can download malware then network propagations.
Like I said, it forms a gene.
If one computer is infected, it can potentially in other computers on the same network email attachments.
Nowadays you have always heard about the word phishing attacks, which are mostly carried out because
of emails, spam emails.
Suppose an attack sends you an email saying here's the opportunity to get a thousand dollars, download
this software and win thousand dollars.
A normal person would surely go for that software, execute the file and he may get, you know, some
advertisement or something or any other thing.
But at the back end, that software may install a backdoor, which in turn is a malware.
And then potentially harm your system, decoy applications like Trojans, for example, if the website
is download or Plenel for the app, which can clean your PC, which can make your PC fast run like a
super computer, but who knows?
It can be a malware portable hardware media, for example, if an attacker has a way to insert a USB
drive to your PC, he can harm your PC by that USB drive.
Instant messenger applications, these applications have also proved to be potentially harmful.
So how do attackers deploy Malawi's?
Black hat search engine optimization, whenever you search anything on the Internet, the results,
it appears on the screens and you click on those links and they lead you to somewhere and by mistake,
a pop up appears and you try to clues that pop up in something gets downloaded.
Well, that is black hard search engine optimization, which means suppose if you are searching for,
let's say, software, which you want as a free of cost.
So attacker can o analyze the results of search engines and try to guess which victim is searching the
word maximum times.
And he can send a malicious link to that software.
And you may end up downloading a malware then social engineering.
The attackers and hackers who are pretty intelligent have a decent skill of social engineering, which
will be learning, which is an art of, you know, humans to tell them to reveal their identity, their
pursuit, then drive by downloads, download from unnecessary websites, non trusted websites, spam
emails.
Again, I told you that spam emails are one of the most highest rated R types of deployment malware
where people end up you downloading some files.
Now, you will ask the question, but Gmail is secure.
Yes, even if Jimin is secure, the application doesn't literally scan through the websites or emails
or files an attacker can send, doesn't have that much of time to scan Laks.
And then millions and thousands of emails which are sent every day.
So educating people about phishing attacks is very important.
What are the components of malware?
Well, crypto downloader, drapeau exploit injector, obfuscatory Bako payload and malicious code.
Components of a malware software relies on the requirements of the malware Otto, who designed it for
a specific target to perform the intended task so may depend upon what task is supposed to be executed.
The first thing is Krypto Krypto is a software that protects malware from undergoing reverse engineering
or analysis, thus making the task of security mechanism harder in the detection downloader download
or type of Trojan that downloads other malware from the Internet onto the PC.
Usually attackers install downloaded software when they first gain access to a system.
Drop, drop, what is a type of Trojan that installs other malware files onto the system, either from
the malware package or on the Internet?
Extortive, we have heard about the bomb exploded in the security terms, let's have a quick revision
here.
Excellent is a malicious code that breaches the system security where software Wednesday's to access
information or install malware.
Injector program that injects its core into other vulnerable running processes and changes the way of
execution in order to hide or prevent its removal obfuscate.
It is a program that concealed its core, an intended purpose, where various techniques and does makes
it really hard for security mechanisms to remove the software from the P.C. payload.
We have also seen Pilou.
Let's have a quick revision.
A payload is a piece of software that allows control over a computer system after it has been exploded.
And finally, a malicious code, a malicious code is a command that defines malware as basic functionalities,
such as stealing data and creating back doors.
So these are the components of malware that are commonly present, namely malware.
In the next election, we will actually see one of the types of malware that is a Trojan.