malware.rst
author Oleksandr Gavenko <gavenkoa@gmail.com>
Wed, 05 Aug 2015 23:55:34 +0300
changeset 1729 22ffd80639c0
parent 264 0eb844b71dd1
permissions -rw-r--r--
Make centered content design with adoption for mobile devices. Highlight TOC.
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
264
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     1
-*- mode: outline; coding: utf-8 -*-
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     2
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     3
* Classification.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     4
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     5
Malware (malicious software) is software designed to infiltrate a computer
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     6
system without the owner's informed consent.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     7
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     8
** Virus.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     9
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    10
Program that has infected some executable software and that causes that
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    11
software, when run, to spread the virus to other executable software.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    12
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    13
Viruses may also contain a payload that performs other actions, often
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    14
malicious.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    15
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    16
** Worm.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    17
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    18
Worm is a program that actively transmits itself over a network to infect
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    19
other computers.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    20
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    21
Worms may also contain a payload that performs other actions, often malicious.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    22
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    23
** Trojan horses.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    24
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    25
Trojan horse is any program that invites the user to run it, concealing a
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    26
harmful or malicious payload.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    27
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    28
One of the most common ways that spyware is distributed is as a Trojan horse,
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    29
bundled with a piece of desirable software that the user downloads from the
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    30
Internet.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    31
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    32
** Rootkits.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    33
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    34
Rootkit is a program which modifying the host operating system so that the
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    35
malware is hidden from the user.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    36
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    37
Rootkits can prevent a malicious process from being visible.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    38
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    39
** Backdoors.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    40
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    41
A backdoor is a method of bypassing normal authentication procedures. Once a
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    42
system has been compromised, one or more backdoors may be installed in order
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    43
to allow easier access in the future.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    44
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    45
** Spyware.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    46
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    47
Spyware is a type of malware that is installed on computers and collects
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    48
information about users without their knowledge.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    49
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    50
The presence of spyware is typically hidden from the user.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    51
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    52
Sometimes, spywares such as keyloggers are installed by the owner of a shared,
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    53
corporate or public computer on purpose in order to secretly monitor other
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    54
users.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    55
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    56
** Adware.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    57
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    58
Adware or advertising-supported software is any software package which
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    59
automatically plays, displays, or downloads advertisements to a computer after
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    60
the software is installed on it or while the application is being used.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    61
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    62
** Botnets.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    63
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    64
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    65
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    66
** Keystroke loggers.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    67
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    68
Malware programs install a key logger, which intercepts the user's keystrokes
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    69
when entering a password, credit card number, or other information that may be
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    70
exploited. These are then transmitted to the malware creator.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    71
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    72
** Dialers.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    73
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    74
Electronic device that is connected to a telephone line to monitor the dialed
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    75
numbers and alter them to seamlessly provide services that otherwise require
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    76
lengthy access codes to be dialed.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    77
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    78
** Screen scrapers.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    79
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    80
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    81
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    82
** Phishing.
0eb844b71dd1 About malware.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    83