CSCI 6250 - Module 3

malware hit POS systems in 2015, stealing card data. Newer POS attacks target personal info over full card data.

Which of the following doesn’t attach itself to a host but can replicate itself?

An exploit that inserts code into memory due to poor coding is called which of the following?

To help prevent malicious code from being introduced into corporate networks, many organizations look to application

can be used to reduce the risk of a Trojan or rootkit sending information from an attacked computer to a remote host

data-stealing malware sold as a service. It logs keystrokes, steals clipboard/web data, and spreads via spam.

Which of the following is a good place to begin your search for vulnerabilities in Microsoft products?

compromised computers, referred to as

causes the victim computer to freeze and malfunction; example of DoS

hardware devices or software that can be used to capture keystrokes on a computer

defined as securing a stand-alone computing device that’s not part of a network infrastructure.

The most insidious attacks against networks and computers worldwide take place via _

virus coded as a macro in programs that support macro programming language, such as Visual Basic for Applications (VBA)

enables an attacker to join a TCP session and make both parties think he or she is the other party.

Trojans disguise themselves as useful programs and can install a _ on a computer.

type of virus that locks a target system until a ransom is paid, is a growing trend in viruses.

An attacker can listen on unencrypted network traffic to intercept confidential info or gather credentials for attack.

tracks your purchases to show ads, may display banners, & sends data to hackers, risking privacy; fine line w/spyware

enables an attacker to join a TCP session and make both parties think he or she is the other party.

An exploit that leaves an attacker with another way to compromise a network later is called which of the following?

an attack happens when a weakness or _ is exploited.

What type of network attack relies on multiple servers participating in an attack on one host system?

an attacker finds a vulnerability in poorly written code that doesn’t check for a defined amount of memory space use

Eavesdropping uses sniffing tools like tcpdump and Wireshark to capture copies of packets sent over a network.

Which of the following exploits might hide its destructive payload in a legitimate application or game?

caused 1/3 of 2020 ransomware attacks, targeting firms, hospitals, and governments with multimillion demands

specially crafted string of data intended to take advantage of a vulnerability.

A software or hardware component that records each keystroke a user enters is called which of the following?

Antivirus checks file signatures & behaviors; if matched to known threats, it warns you the file or program is infected

program that attaches itself to a file or another program, often sent via email

defined as any attempt by an unauthorized person to access, damage, or use network resources or computer systems.

compromised computers are part of a _ (network of “robot” computers) following instructions from a central location/sys

First seen in 2009, this malware spreads via hacked sites, exploits PDF/Flash flaws, steals FTP creds, and joins botnets

a major ransomware predecessor, encrypts files and demands ransom, spreading via malicious email links or files

sends information from the infected computer to the person who initiated the spyware program on your computer.

What is the main purpose of malware?

concerned with the security of computers or devices that are part of a network infrastructure.

programs that give attackers a means of regaining access to the attacked computer later.

This malware spreads via phishing emails w/ Word docs and .cpl files, targets banks, opens backdoors, and aids in fraud

allows users to run programs in a secure, isolated operating area that prevents malicious files from being written to HD

To reduce the risk of a virus attack on a network, you should do which of the following?

Active since 2008, this ransomware uses strong 1024-bit encryption to lock files and demands payment for the key.

malicious software, ie virus, worm, or Trojan program, introduced to a network to help attackers accomplish their goals

program that replicates and spreads without attaching to a host, unlike a virus which needs one.

One step beyond eavesdropping; Attackers can intercept and alter messages between two communicating parties or systems.

The Ping of Death is an exploit that sends multiple ICMP packets to a host faster than the host can handle.

A macro virus is a Trojan horse that delivers a malicious payload to unsuspecting users via documents.

Which of the following is an example of a macro programming language?

launched against a host from multiple servers or workstations; a network could be flooded with billions of packets

What exploit is used to elevate an attacker’s permissions by inserting executable code in the computer’s memory?

A computer __________ relies on a host to propagate throughout a network.

What is the primary way that malware enters an organization?

prevents legitimate users from accessing network resources.