Malware

Malware

Malware is a general term for malicious software, and it is a growing problem on the Internet. Hackers install malware by exploiting security weaknesses on your web server to gain access to your web site. Malware includes everything from adware, which displays unwanted pop-up advertisements, to Trojan horses, which can help criminals steal confidential information, like online banking credentials.Malware is increasingly distributed through web browsers. Hackers use drive-by malware to spread viruses, hijack computers, or steal sensitive data, such as credit card numbers or other personal information.

Drive-by malware

Drive-by malware downloads itself onto a user’s system without their consent. Cybercriminals exploit browser and/or plug—in vulnerabilities to deliver the malware by hiding it within a web page as an invisible element (e.g., an iframe or obfuscated javascript) or by embedding it in an image (e.g., a flash or PDF file) that can be unknowingly delivered from the web site to the visitor’s system.

The anatomy of malware attacks

To infect a computer through a web browser, an attacker must accomplish two tasks. First, they must find a way to
connect with the victim. Next, the attacker must install malware on the victim’s computer. Both of these steps
can occur quickly and without the victim’s knowledge, depending on the attacker’s tactics.

Common types of malware delivery mechanisms

• Software updates
• Banner ads
• Downloadable documents
• Man-in-the-middle
• Keyloggers