Security Plus Definitions

A hidden software program, typically malicious, that provides privileged, root-level access to a computer

Social engineering attempt in which threat actors trick employees into helping them gain unauthorized access

Which type of password attack attempts to guess passwords by using a list of common passwords?

Target computers infected by malware that connects back to a central server(s) to perform tasks

Security exploit that compromises aspecific group of end users by infecting websites that a specific group visits

Combining conventional warfare with cyberwarfare a branch of influence campaigns

MITM attacks, DNS poisoning, phishing, etc. to amass a large numbers of username / password combos

Irrelevant or unsolicited messages sent to a lot of Internet users for illegitimate advertising, and malware

A computer controlled by an attacker or cybercriminal which is used to send commands to systems compromised by malware

Allows covert surveillance, a backdoor for administrative control and remote access to a victim computer

Information gathering about a target network

A program that installs itself on a computer or through another install, typically without the user's informed consent

Software that does not rely on files and leaves no footprint, in memory, making it challenging to detect and remove.

Fraudulent attempt to obtain sensitive information or data, by disguising oneself as a trustworthy entity

Type of cybersquatting used by imposters that involve registering domains with intentionally misspelled names

If Alice badges and Bob walks right in behind her without badging in, what is that an example of?

An attack on a password that uses a large pregenerated data set of hashes from nearly every possible password

Guessing a password by attempting every possible combination of characters and numbers in it

A program or file designed to be disruptive, invasive and harmful to your computer.

Cyberattack intended to redirect a website's traffic to another, fake site.

When someone tries to trick you into giving them your private information via a text or SMS message.