Let us continue our section with tradition in this lecture, we will learn what is a tradition, how
hackers use tradition and the common ways of infecting systems with Trojan.
What is a Trojan?
Trojan is a program in which the malicious code is contained inside apparently or harmless programming
or data in such a way that it can get control and cause damage, such as running the file allocation
system into crash on the hard disk.
Now, where this war Trojan came from is a Greek story in which the army of one state or one ruler entered
into the state or province of another king via a Trojan horse.
Now, though, there was only a horse and the army was hidden inside the horse.
So in this way, this program or this piece of software storm that Struzan, because the malicious code
is actually hidden inside a legitimate code.
So, for example, if you download a software wagin from any website for free, but that software website,
that software Virgin is bid on legal websites like Amazon, Flipkart, what you are interested in trying
the free software because any of you are getting it for free.
So you download it, you run it, you give it permissions.
And after a few days you see that your computer is working very slow.
Your resources are taking time to load through scandal.
You are busy and you observe that your PC has been infected with malware.
So how do you find out that since you downloaded the Free Virgin from a random website, the person
who has uploaded that virgin also from the website may have inserted a malicious code behind illegal
software.
So a common person like we people, all the people who did not have much idea or who are fooled by the
idea of getting birds of prey for free, they might not recognize it.
And that is why downloading software from untrusted websites is one of the main reason why these Trojans
get executed very efficiently.
So Trojans get activated upon using certain predefined action and upon activation.
So as a tool, you should download a software from a free website.
Now you click the software as a run and you give the permissions to store the software details and data,
which in turn means that you have given indirect permissions to the region itself.
And that is why they get activated only upon user actions.
Indications of what true attack include abnormal system and the network activities such as disabling
of antivirus retardation to unknown pages, frequent pop ups at load resource loading and minimal plugins
create a covert communication channel between the victim computer and the attacker for transmitting
sensitive data.
So through Trojan, that attacker can get your sensitive data.
So in short, a Trojan acts like a bonafied application profile, which can easily trick you.
So once the program is installed, a Trojan can perform the action it was designed for.
The next question is how can hackers use Trojan?
Well, plugins can delete or replace the system files.
They can infect your system as a proxy so they can use your system as a proxy server.
Then they can use the victim's PC for illegal purposes now, once they have access of your PC, they
can perform any actions through your PC without revealing their own identity.
Well, they can record screen shots or using videos.
I remember one attack a group had claimed of are using the videos and recordings of the US president,
Mr. Donald Trump.
So there might be a chance that the White House computer had faced a cyber attack.
The intrusions can also be used to disable antivirus and firewalls.
They can also download malicious software.
Well, have you even come across a pop up on your screen saying that there is an update for your PC?
Please download the software.
Whenever you visit a random website, it gives a pop up.
Please download the software to upgrade your Kurume.
Have ever received that pop up?
Well, as a security expert, I would like to tell you that please do not go to those links and please
do not click, because just by clicking those links, you give permissions to their software to get
downloaded.
So always download software from the legitimate sources.
And if your friend or even if you download it from a non legitimate source before installing the software,
make sure that you check the hashes of the software.
Now, how to check the hashes.
We are going to see that in the cryptography practicals.
The next question is how to create a Trojan horse that was created Trojan.
Well, the answer is very easy.
You have the process in front of you.
The first step is to create a new Trojan packet using a Trojan horse construction kit.
All there are examples of many softwares which are readily available over the Internet to create a Trojan
stepto then you have to create a dropper.
Now, what is a dropper?
Dropper is a part in the Trojan packet that installs the malicious code on the target system.
So basically a dropper is a program that hides malicious code inside it.
The next step is to create a proper or wrapper using the wrapper tools to install Trojan on the victim's
computer.
Then you have to propagate the Trojan that is standard solution to the victim, where emails, where
social engineering.
We have seen how hackers deploy these skills.
Then the fifth step is to execute the drapeau, that is to install the legitimate call.
And the last step is to execute the damage.
Repeat that is, after installing the main program, attacker can install the Trojan.
So in the next lecture, you will see different types of Perugian that are presently ruining victims
and computers.
So the next lecture would really help you to understand the Trojans and it may also help you to self
assess your computers.
So make sure you do not skip any of these lectures.