CYS405 · Chapter 7 · Annotated SlidesMalware
Original
Overview

Malware

Malware types (spyware, adware, scareware, ransomware), viruses and how they spread, worms, Trojans and how they get onto systems, infection symptoms and detection, netstat, wrappers, construction kits, backdoors, keyloggers, port redirection and pen testing for Trojans.

How to read this page

Every original slide is shown unchanged. Yellow marks on a slide point to a numbered note: hover or tap a mark to jump to its note, and hover a note to see its marks. Questions tagged Past exam appeared on a real paper; Prediction questions are likely angles, not confirmed. Pick an answer to each question: a wrong pick tells you why it is wrong, so you can try again.

All 40 slides
  1. 1 Slide 1
  2. 2 Learning Objective
  3. 3 Key Concepts
  4. 4 Malware Introduction
  5. 5 Types of Malware
  6. 6 Spyware
  7. 7 Spyware Methods of Infection
  8. 8 Bundling with Software
  9. 9 Adware and Scareware
  10. 10 Ransomware
  11. 11 Ransomware (Cont.)
  12. 12 Malware Targets
  13. 13 Viruses and How They Function
  14. 14 Types of Viruses
  15. 15 Virus Prevention
  16. 16 Worms and How They Function
  17. 17 Stopping Worms
  18. 18 Slide 18
  19. 19 Significance of Trojans: Types
  20. 20 Methods to Get Trojans onto a System
  21. 21 Methods to Get Trojans onto a System (Cont.)
  22. 22 Targets of Trojans
  23. 23 Known Symptoms of an Infection
  24. 24 Known Symptoms of an Infection (Cont.)
  25. 25 Known Symptoms of an Infection (Cont.)
  26. 26 Detection of Trojans and Viruses
  27. 27 Classic Trojans, Ports, and Protocols
  28. 28 netstat Results of the Command
  29. 29 Trojan Distribution Method: Wrappers
  30. 30 Wrappers
  31. 31 Different ways a Trojan can get into a System
  32. 32 Trojan Construction Kits
  33. 33 Backdoors
  34. 34 Keystroke Loggers
  35. 35 Port Redirection
  36. 36 Port Redirection (Cont.)
  37. 37 Pen Testing for Trojans and Backdoors
  38. 38 Pen Testing for Trojans and Backdoors
  39. 39 Pen Testing for Trojans and Backdoors
  40. 40 Summary
Slide 1 / 40

Slide 1

Slide 1: Slide 1
Slide 2 / 40

Learning Objective

Slide 2: Learning Objective
Slide 3 / 40

Key Concepts

Slide 3: Key Concepts
Slide 4 / 40

Malware Introduction

Slide 4: Malware Introduction
Slide 5 / 40

Types of Malware

Slide 5: Types of Malware

Notes

  1. Malware = software designed to harm or abuse a system: viruses, worms, Trojans, spyware, adware, ransomware, rootkits.

Slide 6 / 40

Spyware

Slide 6: Spyware

Notes

  1. Spyware: secretly gathers information about the user and sends it out.

Slide 7 / 40

Spyware Methods of Infection

Slide 7: Spyware Methods of Infection
Slide 8 / 40

Bundling with Software

Slide 8: Bundling with Software
Slide 9 / 40

Adware and Scareware

Slide 9: Adware and Scareware
Slide 10 / 40

Ransomware

Slide 10: Ransomware

Exam angle

PredictionQ1

Malware that encrypts files and demands payment is:

Slide 11 / 40

Ransomware (Cont.)

Slide 11: Ransomware (Cont.)
Slide 12 / 40

Malware Targets

Slide 12: Malware Targets
Slide 13 / 40

Viruses and How They Function

Slide 13: Viruses and How They Function

Notes

  1. A virus attaches to a host file and needs USER ACTION to spread.

Slide 14 / 40

Types of Viruses

Slide 14: Types of Viruses
Slide 15 / 40

Virus Prevention

Slide 15: Virus Prevention
Slide 16 / 40

Worms and How They Function

Slide 16: Worms and How They Function

Notes

  1. A worm self-replicates across networks WITHOUT user action.

  2. Memory trick Virus needs a host and a user; worm spreads by itself; Trojan pretends to be useful.

Exam angle

PredictionQ1

Which spreads on its own without attaching to a file or needing user action?

Slide 17 / 40

Stopping Worms

Slide 17: Stopping Worms
Slide 18 / 40

Slide 18

Slide 18: Slide 18

Notes

  1. Trojan: looks legitimate but hides a malicious payload (often a remote-access backdoor).

Exam angle

PredictionQ1

A "free game" that secretly opens a backdoor is a:

Slide 19 / 40

Significance of Trojans: Types

Slide 19: Significance of Trojans: Types
Slide 20 / 40

Methods to Get Trojans onto a System

Slide 20: Methods to Get Trojans onto a System
Slide 21 / 40

Methods to Get Trojans onto a System (Cont.)

Slide 21: Methods to Get Trojans onto a System (Cont.)
Slide 22 / 40

Targets of Trojans

Slide 22: Targets of Trojans
Slide 23 / 40

Known Symptoms of an Infection

Slide 23: Known Symptoms of an Infection

Notes

  1. Symptoms: slow system, strange pop-ups, disabled antivirus, unknown processes, unexpected network traffic.

Slide 24 / 40

Known Symptoms of an Infection (Cont.)

Slide 24: Known Symptoms of an Infection (Cont.)
Slide 25 / 40

Known Symptoms of an Infection (Cont.)

Slide 25: Known Symptoms of an Infection (Cont.)
Slide 26 / 40

Detection of Trojans and Viruses

Slide 26: Detection of Trojans and Viruses
Slide 27 / 40

Classic Trojans, Ports, and Protocols

Slide 27: Classic Trojans, Ports, and Protocols
Slide 28 / 40

netstat Results of the Command

Slide 28: netstat Results of the Command

Notes

  1. netstat -an lists open ports and connections: look for unknown listening ports.

Slide 29 / 40

Trojan Distribution Method: Wrappers

Slide 29: Trojan Distribution Method: Wrappers

Notes

  1. Wrappers bind a Trojan to a legitimate program so both run together.

Slide 30 / 40

Wrappers

Slide 30: Wrappers
Slide 31 / 40

Different ways a Trojan can get into a System

Slide 31: Different ways a Trojan can get into a System
Slide 32 / 40

Trojan Construction Kits

Slide 32: Trojan Construction Kits
Slide 33 / 40

Backdoors

Slide 33: Backdoors

Notes

  1. Backdoor: a hidden way to bypass normal authentication and return later.

Slide 34 / 40

Keystroke Loggers

Slide 34: Keystroke Loggers
Slide 35 / 40

Port Redirection

Slide 35: Port Redirection

Notes

  1. Port redirection (e.g. netcat, fpipe) forwards traffic from an allowed port to another host/port to bypass firewalls.

Slide 36 / 40

Port Redirection (Cont.)

Slide 36: Port Redirection (Cont.)
Slide 37 / 40

Pen Testing for Trojans and Backdoors

Slide 37: Pen Testing for Trojans and Backdoors
Slide 38 / 40

Pen Testing for Trojans and Backdoors

Slide 38: Pen Testing for Trojans and Backdoors
Slide 39 / 40

Pen Testing for Trojans and Backdoors

Slide 39: Pen Testing for Trojans and Backdoors
Slide 40 / 40

Summary

Slide 40: Summary