The era of computer age brought a major shift in technology and redefined the way we work, communicate, and entertain ourselves. From OTT platforms to financial transactions, the bits and data move seamlessly through optical fiber cables (OFC), at lighting speed.
But, on a parallel path, malware attack has ushered in a wave of cyber-crimes, ranging from identity theft to data hacking.
What is Malware...
Defined as any software which intentionally disrupts the working of a computer or network system.
This can be in the form of data loss, denial of service (DDoS) attack, or hijack of core computer services.
These attacks are not confined to business or home users, but extend to large industries such as water treatment, or electric substations.
Malwares are classified into different categories. This is based on their attack signature, proliferation and of course, main intent or purpose.
Types of malwares
1. Virus
The most reputed, virus enter host computer through an infected file. The file could be downloaded, or passed through a storage media (USB, Memory Card). Once inside, the virus makes multiple copies of itself, while infecting other system files.
Destruction is the keyword here, and this includes corrupting, deleting or encrypting important data files. The computer also becomes slow or sluggish and eventually crashes.
The virus can also spread to other systems, via email attachments or storage devices (External hard disc, USB, Memory cards)
2. Worm
Spread through an affected computer network, it doesn't need a host program to infect. They target system vulnerabilities like a weak firewall, or zero-day exploit (unknown system vulnerability).
Once inside, it consumes all the data files, making them inaccessible and eventually, corrupted. Once the job is done, it migrates to the next system in the affected network.
3. Ransomware
Now common in occurrence, ransomware hijacks sensitive data files. This is done by encrypting the complete system, making it inaccessible to the user.
All that is left is a screen, with a threat attached. Either pay a ransom or all your data will be lost. Payment is usually in the form of crypto currency.
On paying the ransom, a key is provided to decrypt the data. But there is another side to this.
In due process, the affected information could be leaked into the dark web, attracting other scammers.
4. Trojan Horse
Doesn't encrypt anything. Neither does a damage occur to system or data files.
On the contrary, some trojans can speed up the host system. All this is done to avoid detection, and here lies its true intent.
To steal valuable user data including passwords, credit card information, or browsing history. This is done by using techniques like key loggers, system snapshots etc.
Trojan comes packaged as a useful software, hence its name. But once installed, it leads to unlimited access for the malware.
5. Rootkit
Provides the hacker with core system privileges, while remaining hidden. This allows for downloading more malwares such as trojans, into the affected computer.
They form the first phase of attack, erstwhile providing a path for subsequent intrusions.
6. Adware
Commonly referred to as spam, they display unwanted ads, pop ups. Though not inherently destructive, can reduce system performance.
Also, chance of clicking unwanted links that can open malicious websites.
7. Joke Program
They are also not destructive in nature. Mostly causing annoyance, in the form of multiple messages boxes, or frequent opening or closing of CD-ROM tray.
The Remedy
Though a malware attack can occur at any instance, there are few steps which provide a protective shield against the same. They include
1. Keep the operating system up to date. Regular updates/patches can reduce exploits or backdoors used by malware.
2. Invest in a good antivirus software. Instead of freeware, go for a paid version which doubles in security. Notables include Norton, McAfee, Malware Bytes.
3. Do not open suspicious links or attachments. They may come from a known source, but as said earlier, can also be from an infected system.
4. To check the credibility of a website, cross check the same, using Norton Safe Web, or McAfee Site Advisor. This is especially important in case of e commerce transactions.
5. Use Cloud services to transfer/migrate data. This reduces risk of infection by removable storage devices, like USB drives.
Comments
Post a Comment