Volume 05-Malware Exam | Questions with 100% Correct Answers | Verified | Latest Update 2026

Malware

Short for 'malicious software' refers to any software designed to infiltrate a computer system and intentionally cause damage, disrupt operations, steal data, or otherwise exploit devices, networks, or services.

Viruses

Code that attaches itself to legitimate programs or files and spreads when executed.

Worms

Self-replicating malware that spreads across networks without needing a host program.

Trojan Horses

Malware disguised as legitimate software to trick users into installing it.

Ransomware

Encrypts a victim's data and demands payment (ransom) for its release.

Spyware

Secretly collects user information, often for purposes like surveillance or financial theft.

Adware

Displays unwanted ads and may redirect users to malicious websites.

Rootkits

Allows attackers to gain administrative control of a system while remaining undetected.

Keyloggers

Records users' keystrokes to capture sensitive information such as passwords or credit card details.

Botnets

Networks of infected devices controlled remotely by attackers, often used for launching large-scale attacks like DDoS.

Backdoors

Malicious means of bypassing normal authentication processes to gain unauthorized access to a system.

Logic Bombs

Embed code placed in legitimate programs that execute a malicious action when a specific condition or trigger occurs.

Bloatware

Unnecessary or pre-installed software that consumes system resources and space without offering any value to the user.

Threat Vector

Specific method used by an attacker to infiltrate a victim's machine.

Attack Vector

A means by which an attacker gains access to a computer to infect the system with malware.

Malware exploitation techniques

Involves methods by which malware infiltrates and infects targeted systems.

Computer Virus

Malicious code that's run on a machine without the user's knowledge.

Boot Sector Virus

Stored in the first sector of the hard drive and is then loaded into memory whenever the computer boots up.

Macro Virus

A form of code that allows a virus to be embedded inside another document.

Program Virus

Tries to find executable or application files to infect with their malicious code.

Multipartite Virus

A combination of boot sector type virus and a program virus infecting both files and the boot sector.

Encrypted Virus

Designed to hide itself from being detected by encrypting its malicious code.

Polymorphic Virus

Advanced version of an encrypted virus that changes the virus code each time it is executed.

Metamorphic Virus

Able to rewrite itself entirely before it attempts to infect a given file.

Stealth Virus

Use techniques to hide their presence from antivirus programs.

Armored Virus

Have a layer of protection to confuse a program or a person who is trying to analyze it.

Hoax

A form of technical social engineering that attempts to scare end users into taking undesirable action.

File Infector Virus

Infect executable files (e.g., .exe files) and spread when these files are run.

Remote Access Trojans (RATs)

Provide attackers with remote control of the victim's system, enabling data theft or spying.

Banking Trojans

Designed to steal financial information, such as login credentials or credit card numbers.

Downloader Trojans

Download and install additional malicious programs onto the infected system.

Backdoor Trojans

Create unauthorized access points, allowing attackers to bypass normal security measures.

Spyware Trojans

Collect sensitive information, such as keystrokes, screenshots, or browser activity.

Rootkit Trojans

Hide malicious activities or processes, making them harder to detect.

Ransom Trojans

Encrypt data or lock systems, demanding a ransom for restoration.

Zombies

Refers to an individual computer or device that has been compromised by malware and is under the control of a hacker.

Command and Control Node (C2 Node)

Responsible for managing and coordinating the activities of other nodes or devices within a network.

Kernel Mode

Allows a system to control access to things like device drivers, sound card and monitor.

DLL Injection

Technique used to run arbitrary code within the address space of another process.

Dynamic Link Library

A collection of code and data that can be used by multiple programs simultaneously.

Shim

Software code that is placed between two components and intercepts the calls between those components.

Fileless Malware

Used to create a process in the system memory without relying on the local file system of the infected host.

Action on Objective phase

Threat actors will execute primary objectives to meet core objectives.

Concealment

Used to help the threat actor prolong unauthorized access to a system by hiding tracks.

Living off the land

A strategy adopted by many Advanced Persistent Threats and Criminal organizations.