Malware Types Targeting User’s Activity
Malicious software is a common threat that any organization will face. Within information technology (IT) security, this is relatively easy to prevent. However, that doesn’t reduce its importance. The damage can be extensive if an organization ignores this threat. If you’re planning on taking the Security+ exam, you should have a basic understanding of malware types.
For example, can you answer this question?
Q. Of the following malware types, which one is MOST likely to monitor a user’s computer?
A. Trojan
B. Spyware
C. Adware
D. Ransomware
More, do you know why the correct answer is correct and the incorrect answers are incorrect? The answer and explanation is available at the end of this post.
Malware types include adware, virus, spyware, Trojan, rootkits, backdoors, logic bomb, botnets, ransomware, polymorphic malware, and armored virus. This post covers spyware and adware.
Spyware
Spyware is software installed on users’ systems without their awareness or consent. Its purpose is often to monitor the user’s computer and the user’s activity. Spyware takes some level of control over the user’s computer to learn information and sends this information to a third party. If spyware can access a user’s private data, it results in a loss of confidentiality.
Some examples of spyware activity are changing a user’s home page, redirecting web browsers, and installing additional software, such as search engines. In some situations, these changes can slow a system down, resulting in poorer performance. These examples are rather harmless compared with what more malicious spyware (called privacy-invasive software) may do.
Privacy-invasive software tries to separate users from their money using data-harvesting techniques. It attempts to gather information to impersonate users, empty bank accounts, and steal identities. For example, some spyware includes keyloggers used to capture keystrokes. The keystrokes are stored in a file, and the spyware periodically sends the file to the attacker. In some instances, the spyware allows the attacker to take control of the user’s system remotely.
Spyware is often included with other software like a Trojan. The user installs one application but unknowingly gets some extras. Spyware can also infect a system in a drive-by download. The user simply visits a malicious web site that includes code to automatically download and install the spyware onto the user’s system.
Adware
When adware first emerged, its intent was usually to learn a user’s habits for the purpose of targeted advertising. As the practice of gathering information on users became more malicious, more people began to call it spyware. However, some traditional adware still exists.
A common type of adware is pop-ups. For example, while you are visiting a site, another browser window appears, or pops up, with an advertisement. These pop-up windows aren’t malicious, but they are annoying.
CompTIA Security+ Study Guide
The 501 Version of the Study Guide is Now Available. Click Here.
The 401 Version of the Study Guide
The CompTIA Security+: Get Certified Get Ahead: SY0-401 Study Guide
is an update to the top-selling SY0-201 and SY0-301 study guides, which have helped thousands of readers pass the exam the first time they took it.
After a comprehensive review by ProCert Labs, the SY0-401 version has been certified as CompTIA Approved Quality Content (CAQC) and covers every aspect of the SY0-401 exam.
It includes the same elements readers raved about in the previous two versions.
Each of the eleven chapters presents topics in an easy to understand manner and includes real-world examples of security principles in action.
You’ll understand the important and relevant security topics for the Security+ exam, without being overloaded with unnecessary details. Additionally, each chapter includes a comprehensive review section to help you focus on what’s important.
Click for Free Preview
Over 400 realistic practice test questions with in-depth explanations will help you test your comprehension and readiness for the exam. The book includes:
- A 100 question pre-test
- A 100 question post-test
- Practice test questions at the end of every chapter.
Each practice test question includes a detailed explanation to help you understand the content and the reasoning behind the question. You’ll be ready to take and pass the exam the first time you take it.
If you plan to pursue any of the advanced security certifications, this guide will also help you lay a solid foundation of security knowledge. Learn this material, and you’ll be a step ahead for other exams. This SY0-401 study guide is for any IT or security professional interested in advancing in their field, and a must read for anyone striving to master the basics of IT security.
Sometimes pop-ups can be helpful. As a legitimate example, my online bank has interest-rate information that I can view. When I click on this link, it pops up another window showing the interest-rate information without taking me away from the current page I’m viewing.
The term adware also applies to software that is free but includes advertisements. The user is well aware that the advertisements appear, and has the option to purchase a version of the software that does not include the ads. All of this is aboveboard without any intention of misleading the user.
Check out these other posts on malware.
- Identifying Malware Threats
Discusses viruses, worms, Trojans, logic bombs, and rootkits - Reverse Engineering in Malware
Discusses how security experts attempt to discover what malware is doing (and how attackers attempt to thwart their attempts). - Rogueware, Scareware, and Ransomware
A few more types of malware.
Remember this
Spyware monitors a user’s computer. Pop-ups are annoying windows that appear while browsing. Many pop-ups are adware designed to market products to users.
Full Security+ Course
SY0-401 Full Security+ Course
Helping you Pass the First Time
Online access includes all of the content from the
CompTIA Security+: Get Certified Get Ahead: SY0-401 Study Guide
Click here if you're looking for SYO-501 Full Security+ Course
- Introduction
- About the exam (including types of questions and strategies for performance-based questions)
- 100 question pre-assessment exam
- Mastering Security Basics (full content from Chapter 1 of the study guide including the exam topic review and 20 practice test questions)
- Exploring Control Types and Methods (full content from Chapter 2 of the study guide including the exam topic review and 20 practice test questions)
- Understanding Basic Network Security (full content from Chapter 3 of the study guide including the exam topic review and 20 practice test questions)
- Securing Your Network (full content from Chapter 4 of the study guide including the exam topic review and 20 practice test questions)
- Securing Hosts and Data (full content from Chapter 5 of the study guide including the exam topic review and 20 practice test questions)
- Understanding Malware and Social Engineering (full content from Chapter 6 of the study guide including the exam topic review and 20 practice test questions)
- Identifying Advanced Attacks (full content from Chapter 7 of the study guide including the exam topic review and 20 practice test questions)
- Managing Risk (full content from Chapter 8 of the study guide including the exam topic review and 20 practice test questions)
- Preparing for Business Continuity (full content from Chapter 9 of the study guide including the exam topic review and 20 practice test questions)
- Understanding Cryptography (full content from Chapter 10 of the study guide including the exam topic review and 20 practice test questions)
- Exploring Operational Security (full content from Chapter 11 of the study guide including the exam topic review and 20 practice test questions)
- 100 question post-assessment exam
- Security+ Acronyms
Get the SY0-401 Full Security+ Course Here
Test your readiness with these quality materials
Random 100-question tests
Random practice tests from the all of the practice test questions in the CompTIA Security+: Get Certified Get Ahead: SY0-401 Study Guide. All questions include explanations so you'll know why the correct answers are correct, and why the incorrect answers are incorrect.34 Simulated Performance-based Questions
Eight sets of performance-based questions with multiple questions in each set. These questions help you understand and prepare for performance based questions.22 Realistic Performance-based Questions
Two new sets of performance-based questions with a total of 22 questions. These new questions use a new testing engine that includes realistic drag and drop, matching, sorting, and fill in the blank questions.
Flashcard Set
- 273 Security+ Flashcards to reinforce key testable concepts
- 280 Security+ acronyms flashcards to help you master the required acronyms
- 204 Security+ Remember This slides
Audio - SY0-401 Security+ Remember This Audio Files
Learn by Listening. Over one hour and 15 minutes of audio (MP3 downloads.)Audio - SY0-401 Security+ Question and Answer Audio Files
Learn by Listening. Over three hours hour and 15 minutes of audio (MP3 downloads.)Bonus #1
Audio from the end of chapter reviews from each of the chapters in the CompTIA Security+: Get Certified Get Ahead: SY0-401 Study Guide
. Over one hour and 15 minutes of additional audio.Bonus #2
Subnetting mini-tutorial that will help you answer two key question types:- Identify how many hosts a subnet supports
- Identify valid IP addresses within a subnet
Bonus #3
Access the study materials for a total of 60 days because sometimes life happens.Get the SY0-401 Full Security+ Course Here
Click here if you're looking for SYO-501 Full Security+ Course
Q. Of the following malware types, which one is MOST likely to monitor a user’s computer?
A. Trojan
B. Spyware
C. Adware
D. Ransomware
Answer is B. Spyware monitors a user’s computer and activity.
Trojans often install backdoor accounts, but they don’t necessarily monitor systems and activity.
Adware typically causes pop-up windows for advertising, and although it might monitor the user to target ads, not all adware monitors users.
Ransomware is primarily concerned with getting the user to make a ransom payment.
