3.6.2, 3.6.2.2 - Malware and protection

3.6.2, 3.6.2.2 - Malware and protection

Malware is hostile or intrusive software. Learn how viruses, trojans and spyware work, and how prevention, detection and maintenance reduce their different risks.

Viruses, trojans and spyware

Malware describes harmful software as a whole; a virus is one kind of malware, not a synonym for every malicious program.

Malware

An umbrella term for hostile or intrusive software that harms systems or misuses their data or resources.

KindMechanism and possible harm
Computer virusAttaches to a host file or program and can replicate when infected material runs, spreading infection to other files or systems. It may alter or destroy data.
TrojanAppears to be legitimate or useful software but carries a hidden malicious function. A fake game installer might install a way for an attacker to access the device. It does not need to replicate like a virus.
SpywareSecretly monitors activity or collects information, such as browsing behaviour or typed credentials, and may send it to another party. A keylogger is an example.

A program can combine malicious behaviours, but the distinctions explain how a threat works. A fake utility that secretly records keystrokes is both deceptive in delivery and spyware in its behaviour. Calling it “a virus” does not establish that it replicates through infected host files.

Worked consequence. A pupil downloads an apparently useful revision app from an untrusted source. Its hidden software records the pupil's login details and sends them away. The delivery resembles a trojan because a useful-looking program hides malicious behaviour; recording private activity is spyware behaviour. An attacker can then misuse the credentials even if no visible file has been deleted.

Continue this lesson.

You’re previewing NovaLearn without an account. Create a free account to read the rest.

Create free account