Malware

What is malware?

A program inserted into a system covertly to compromise security.

What are the two broad classifications of malware?

How it spreads (viruses, worms) and what it does (payload effects).

How do viruses spread?

They infect programs and spread when executed.

What are the four phases of a virus lifecycle?

Dormant, Triggering, Propagation, Execution.

What is the difference between a virus and a worm?

Viruses require execution to spread, worms self-replicate over networks.

Name an example of a worm.

Morris Worm (1988), WannaCry (2017).

What is a Trojan horse?

A malware disguised as legitimate software, does not self-replicate.

Define Advanced Persistent Threat (APT).

Long-term, targeted attacks by state-sponsored or criminal groups.

What is ransomware?

Malware that encrypts data and demands a ransom for decryption.

How do botnets work?

A network of infected computers controlled remotely for attacks.

What are common propagation mechanisms of malware?

Exploiting vulnerabilities, social engineering, content infection.

What are the key malware countermeasures?

Prevention, detection, removal, and perimeter defense.