1.4 Cyber-attack Techniques and Types

Question 1

Exploit

Answer 1

A small piece of software code, part of a malformed data file, or a sequence (string) of commands that leverages a vulnerability in a system or software.

Question 2

Malware

Answer 2

• Viruses
• Worms
• Trojan horses
• Ransomware
• Anti-AV
• Logic bombs (specific condition)
• Back doors
• Rootkits (root access)
• Spyware and adware

Question 3

Characteristics and capabilities of advanced malware

Answer 3

• Distributed, fault-tolerant architecture
• Multi-functionality
• Polymorphism and metamorphism
• Obfuscation

Question 4

Creation of an exploit data file

Answer 4

1. Embed a small piece of malicious code within the data file.
2. Memory corruption that allows the attacker’s code to be inserted into the execution flow of the vulnerable software.

Question 5

Most common delivery methods for Malware

Answer 5

Spam and Phishing emails (45 - 75%)

Question 6

Spam and Phishing

Answer 6

• Spear phishing (more widely used)
• Whaling
• Watering hole (compromise website)
• Pharming (DNS poisoning)