What is malware actually?

What do we actually mean when we talk about Hacking? Hacking means providing yourself access to information on a computer system or network without the owner having provided permission for that purpose. Many will use this information in order to earn money, in this way, customer data (for example, credit card data) is sold on the black market, a system can be encrypted and unencrypted again for a fee, but sometimes it can also regard blackmail where the victim must buy back his/her information.

In addition, image damage can also occur and companies will sometimes be prepared to pay money in order keep confidential the fact that they were even hacked.

Of course, in additional to the criminal hackers, who we call Black hats, there are also hackers who use their skills in order to test whether systems and information are secure. These hackers are called ethical hackers and are known as the white hats. My colleague has already written a blog about the difference between black hats and white hats and the importance of the ethical hacker. I want to particularly discuss in this blog one of the methods that black hats use in order to provide themselves access to information on systems and networks. This method is called Malware (Malicious software).

Malware

Malware is software designed to obtain unsolicited access to systems. The developer of this software takes advantage of known security leaks, which are called exploits, in software packages and uses these leaks to gain access. There are even software packages such as Metasploit, a framework with which you can do pen testing (penetration testing) on all known exploits. Thus, you can use this package as a tool in order to break into PCs using known exploits.

In order to obtain access, the hacker must get you so far that you install this software yourself, unintentionally. The software is sent along with, for example, files that you download from websites and free software that you want to install. You can also install malware on your PC by clicking on unsecure hyperlinks.

Not all malware is equal

Malware comes in different varieties. They all have their own characteristics and features and their own consequences:

Spyware: is developed in order to monitor which activities you execute on your computer. This information will then be collected and can be used in order to get even deeper into a system.

Trojan: is just like the Trojan horse, a container that can contain anything, such as harmless adware, but also less innocent malware. Always be extra careful when you see "FREE DOWNLOAD”, particularly when it is something for which you would normally have to pay. There is no such thing as a free lunch.

Ransomware: has been frequently in the news lately. It is a form of malware that encrypts the files on your computer. This encryption can be reversed after payment and then you have access once again to your files. Note that the malware infection is then not yet gone and can strike once again at any time. In addition, you have no guarantee that you also actually get your data back. It is then also not recommended to pay. Revert instead to a backup.

Backdoor and rootkit: are methods that open the backdoor in your system's security. These methods provide access to your system and can be used in order to give other hacking tools and malware access to the computer system.

Viruses and worms: These tools damage your computer system. Viruses and worms usually hitchhike along with another software package. When this package is installed, you also activate the virus or the worm. Worms can especially wreak a significant amount of havoc, continuing to delete files from the computer as long as they are not stopped.

Scareware: A scareware infection evokes the illusion that your computer is infected in order to lure you into paying money. In reality, however, there is nothing wrong.

Preventing malware

Be careful when downloading files from websites that perhaps look less reliable or when downloading illegal content such as films and music. Also be very alert when downloading and installing freeware. These are the times that hackers are hoping you are paying less attention and installing items that you will later regret.