| Line 1: |
Line 1: |
| | '''Malicious software''' (or '''malware'''), often generically called a virus, is [[computer]] [[software]] which deliberately does something harmful or otherwise abusive to a computer or other digital device.<ref>malware. Dictionary.com. [http://dictionary.reference.com/browse/malware http://dictionary.reference.com/browse/malware], (accessed: July 13, 2011).</ref> Once downloaded, malware can be passed from one computer to another. Malware is usually downloaded to a computer by hiding inside rogue (and sometimes legitimate) software packages: the ''Trojan horse'' (or ''Trojan'').<ref>Definition: [http://searchsecurity.techtarget.com/definition/Trojan-horse Trojan horse], searchsecurity.techtarget.com, (Accessed July 13, 2011).</ref><ref>[https://www.foxnews.com/story/0,2933,307602,00.html Apple Macintoshes Targeted by Porn-Based Computer Virus], [[Fox News|FOXNews.com]], November 02, 2007.</ref> | | '''Malicious software''' (or '''malware'''), often generically called a virus, is [[computer]] [[software]] which deliberately does something harmful or otherwise abusive to a computer or other digital device.<ref>malware. Dictionary.com. [http://dictionary.reference.com/browse/malware http://dictionary.reference.com/browse/malware], (accessed: July 13, 2011).</ref> Once downloaded, malware can be passed from one computer to another. Malware is usually downloaded to a computer by hiding inside rogue (and sometimes legitimate) software packages: the ''Trojan horse'' (or ''Trojan'').<ref>Definition: [http://searchsecurity.techtarget.com/definition/Trojan-horse Trojan horse], searchsecurity.techtarget.com, (Accessed July 13, 2011).</ref><ref>[https://www.foxnews.com/story/0,2933,307602,00.html Apple Macintoshes Targeted by Porn-Based Computer Virus], [[Fox News|FOXNews.com]], November 02, 2007.</ref> |
| | + | |
| | + | ==Means of Infection== |
| | + | The main way that malware infects a computer is through downloads and/or email attachments. However, it can also come through people sharing infected files with each other. More rarely it can also come through vulnerabilities in [[operating system]]s or other software such as through backdoors or scripting abilities. Malware may also provide a means for the infection of additional malware. |
| | | | |
| | ==Symptoms== | | ==Symptoms== |
| Line 9: |
Line 12: |
| | === Mac Malware === | | === Mac Malware === |
| | While Mac malware is scarcer than [[Windows (operating system)|Windows]] malware, over the last ten years threats targeting Mac OS X have been on the rise and have become more sophisticated.<ref>[https://www.intego.com/mac-security-blog/10-years-of-mac-malware-how-os-x-threats-have-evolved/ 10 Years of Mac Malware: How OS X Threats Have Evolved (Infographic)]</ref> In addition, Macs can pass on files that contain malware to Windows users. For this reason, a layered approach to security is the best defense, including the use of a [[firewall]] and Mac [[Anti-virus software|antivirus]] that detects and stops Windows viruses as well as Mac malware.<br /> | | While Mac malware is scarcer than [[Windows (operating system)|Windows]] malware, over the last ten years threats targeting Mac OS X have been on the rise and have become more sophisticated.<ref>[https://www.intego.com/mac-security-blog/10-years-of-mac-malware-how-os-x-threats-have-evolved/ 10 Years of Mac Malware: How OS X Threats Have Evolved (Infographic)]</ref> In addition, Macs can pass on files that contain malware to Windows users. For this reason, a layered approach to security is the best defense, including the use of a [[firewall]] and Mac [[Anti-virus software|antivirus]] that detects and stops Windows viruses as well as Mac malware.<br /> |
| − | Since the iOS is shared across all Mac devices, malware targeting this operating system will sometimes lay dormant until it is connected to another device. For example, one kind of malware will infect an iPhone but remain dormant. Once it is connected to a MacBook (through a wired or wireless connection) it infects that. The malware will also infect any other iOS device available, such as an iPod or iPad. After a time, it can gather information from every device the individual owns, essentially stealing their entire online (and quite possibly real) identity. Such malware is sometimes used by hackers to open a back door into these devices so they can manually lock the entire set of devices and copy everything off of them. | + | Since the iOS is shared across all Mac devices, malware targeting this [[operating system]] will sometimes lay dormant until it is connected to another device. For example, one kind of malware will infect an iPhone but remain dormant. Once it is connected to a MacBook (through a wired or wireless connection) it infects that. The malware will also infect any other iOS device available, such as an iPod or iPad. After a time, it can gather information from every device the individual owns, essentially stealing their entire online (and quite possibly real) identity. Such malware is sometimes used by hackers to open a back door into these devices so they can manually lock the entire set of devices and copy everything off of them. |
| | | | |
| | ==Classifications== | | ==Classifications== |
| − | ====General==== | + | ====Implementation==== |
| − | *[[Computer virus|Virus]] | + | The following terms are often incorrectly used interchangeably, or for malware in general. |
| − | *[[Trojan Horse (malware)|Trojan]] | + | *Viruses. Malware which is inserted into a file or program. It requires the program to run, or the file to be opened, in order for the virus to work. For a more detailed description, see [[Computer virus|Virus]] |
| − | *[[Computer worm|Worm]] | + | *Worms. Malware which operates independently in the background. For a more detailed description, see [[Computer worm|Worm]] |
| − | *Bot | + | *Trojans. Malware which appears to be legitimate software, but whose purpose is nefarious. The program may even provide a useful service to the user. Examples of trojans include [[Adware]] and the [[Tiktok]] app. For a more detailed description, see [[Trojan Horse (malware)|Trojan]] |
| − | *Remote Access Trojan (RAT) | + | *Rootkit. Malware which introduces a vulnerability to a computer through a modification of system software. |
| − | *Rootkit
| + | |
| | + | It should be noted that some malware implement more than one of the above. For instance, a trojan may further infect files with viruses. |
| | + | |
| | + | ====Purposes==== |
| | + | Broadly speaking, malware has one or more of the following purposes. |
| | + | *Making money. The purpose is to earn money the malware maker, or distributor. This can be done through blackmail, by showing advertisements (called [[Adware]]), by stealing information such as passwords or credit card numbers (credential stealers), or by requiring users to pay to gain access to their own data (called [[Ransomware]]). |
| | + | *Damaging data or hardware. The purpose is simply to destroy data (such as deleting files) or hardware (such as [[Stuxnet]]). |
| | + | *Denying service. The purpose is to interfere with access to a service, such as a web site or a public utility. It can target local or national infrastructure, corporations, or average users. |
| | + | *Profiling. The purpose is to gather information. This can be used to profile the user for various reasons ([[Spyware]]), or to help train [[Artificial intelligence]], or to generate statistical data. |
| | | | |
| − | ====Specific==== | + | ====Specific examples==== |
| | + | *Remote Access Trojan (RAT). A trojan whose purpose is to allow a remote user access to your computer. |
| | + | *Bot. Independent software that performs a service on behalf of someone else. A collection of computers infected with the same Bot is called a <i>Botnet</i>. A common use of a botnet is a [[Distributed denial of service attack]]. |
| | *[[Spyware]] | | *[[Spyware]] |
| − | **Credential stealers
| |
| | *[[Adware]] | | *[[Adware]] |
| | *[[Ransomware]] | | *[[Ransomware]] |