Antivirus Software

Critical – CVE-2021-22947

Open Source Curl Remote Code Execution Vulnerability

Important – CVE-2021-36976

Libarchive Remote Code Execution Vulnerability

Important – CVE-2022-21919

Windows User Profile Service Elevation of Privilege Vulnerability

Important – CVE-2022-21836

Windows Certificate Spoofing Vulnerability

Important – CVE-2022-21874

Windows Security Center API Remote Code Execution Vulnerability

Important – CVE-2022-21839

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability (limited to Windows 10 and Windows Server 2019)

Malware is a broad term used to describe all sorts of malicious software, from viruses and trojans to worms and ransomware. While the history of malware can be traced back to the early days of computing, the first known virus appeared in 1971. In this article, we’ll take a closer look at the history of malware, starting with the first virus.

Creeper Virus

The first virus, known as the “Creeper virus,” was created in 1971 by Bob Thomas. The Creeper virus was designed to infect DEC PDP-10 computers running the TENEX operating system. The virus would copy itself from one system to another, and would display the message “I’m the creeper, catch me if you can!”

In 1982, a virus known as the “Elk Cloner” became the first virus to infect Apple computers. The Elk Cloner virus was spread by floppy disk, and would display a message on the infected computer’s screen saying “Elk Cloner: The program with a personality.”

First Worm Appear

In 1987, the first worm appeared. Unlike viruses, which require human interaction to spread, worms are self-replicating and can spread automatically. The first worm, known as the “Morris Worm,” was created by a graduate student at Cornell University named Robert T. Morris. The Morris Worm was designed to exploit vulnerabilities in Unix systems, and ended up infecting over 6,000 computers.

Trojan Horse

Trojan Horse is a type of Malware that uses stealth to infect a computer system. It can remain undetected for long periods of time, and once it’s inside, it can do a lot of damage. Trojan Horses are often used to steal information or to take control of the system.

Possible Damage

• Deleting data
• Blocking data
• Modifying data
• Copying data
• Disrupting the performance of computers or computer networks

Unlike computer viruses and worms, Trojans are not able to self-replicate.

Types of Trojan

Backdoor

Backdoor Trojan is a type of Trojan Horse Malware that gives the hacker a backdoor into your computer, allowing them to access and control your system remotely. This can allow them to steal data, install other malware, or just cause general havoc.

Ransom

This type of trojan can dramatically slow down your computer’s performance, making it difficult to do anything else until you pay the ransom.

SMS

SMS Trojans are a type of malware that use text messages to infect mobile devices. The message may look like it’s from a friend or a trusted source, but in reality, it’s from the Trojan. Once the victim opens the message, the malware is installed on their device and can do anything from stealing data to sending premium SMS.

Banker

Designed to steal users credit card information, passwords, and other account details, to get access to their finance accounts.

Downloader

A downloader type trojan is a type of malware that uses a vulnerability in the victim’s computer to install other malicious files. This can include ransomware, spyware, or adware. The downloader trojan will often use social engineering techniques to trick the user into installing it, such as pretending to be an update for a popular program or posing as a fake website.

Infostealer

Uses various methods to steal information from infected systems. This information can include passwords, credit card numbers, and other sensitive data. Trojans are often distributed through spam emails or malicious websites.

Remote Access

Remote access Trojans (RATs) are ones of the most common type of malware, that give an attacker control over a victim’s computer, often without the victim’s knowledge. RATs can be used to steal data, spy on the user, or even take full control of the system.

DDOS Attack

A DDOS attack type trojan is a malware that uses a Trojan horse to infect a computer and allow attackers to remotely control the system as part of a botnet. Botnets are networks of compromised systems used to launch Distributed Denial of Service (DDoS) attacks, among other nefarious activities.

First Trojan

Called ANIMAL, the first Trojan (although there is some debate as to whether this was a Trojan, or simply another virus) was developed by computer programmer John Walker in 1975, according to Fourmilab. 

Recent Example

Zeus Gameover is part of the “Zeus” family of malware and viruses.

Rootkit

A type of malware that gives the attacker access to the system at a much deeper level than other types of malware. This allows them to hide their presence on the system and carry out malicious activities without being detected.

Backdoor

Backdoors are a type of malware often used by hackers to gain access to a computer system or network without the owner’s knowledge or consent.

Infectious Malware

Infectious malware is a type of malware that spreads quickly and easily. The most common sub-types of this malware are viruses and worms.

Virus

A virus is a type of malware that inserts itself into a program or file and then spreads to other programs and files on the same computer or to other computers connected to the same network.

Worm

Like viruses, worms are also designed to spread themselves from computer to computer, but they don’t need to attach themselves to programs or files.

Ransomware

Ransomware, a type of malware, holds your computer or files hostage until you pay a ransom. The ransomware will encrypt your data and then demand payment in order to release it. Paying the ransom does not always guarantee access to your files again.

Screen Locking

Screen-locking ransomware is a type of ransomware malware that, as the name suggests, locks your computer screen until you pay a ransom. This can be a very effective way to extort money from victims, as they may not know how to unlock their screens or may not have access to the files they need.

Encryption Based

This type of ransomware is particularly dangerous because it uses strong encryption to lock down files on the victim’s computer, making them inaccessible.

Grayware

Grayware is a type of malware that has been on the rise in recent years. Below are the most common types of grayware (sometimes called “greyware”).

Adware

Adware is a type of malware that, once installed on your computer, displays unwanted ads on your screen. While adware is not as dangerous as other types of malware, it can be very irritating and can slow down your computer. Adware is often installed without the user’s knowledge or consent, and can be difficult to remove.

Spyware

Spyware is a type of malware that can be installed on your computer without your knowledge. It can track your activities online and collect personal information, which can be used to steal your identity or for other malicious purposes. It can also slow down your computer and cause other problems.

Fleeceware

Fleeceware is a type of malware that uses keywords in SMS messages, subscription offers, and app downloads to trick users into inadvertently installing malicious software. Once installed, fleeceware can rack up charges on the user’s phone bill without their knowledge or consent.

Dialers

Dialers are a type of malware that use keywords to make calls to premium numbers, often resulting in unwanted charges on the victim’s phone bill.

Jokeware

It often disguises itself as an interesting or funny file, but once installed, can wreak havoc on your device.

PUP

Potentiall Unwanted Programs (PUP) is a type of unwanted apps, which often also includes previously discussed types of grayware, such as Adware or spyware. However, PUA’s or PUP’s are not always classified as a malware.

Malware can enter your computer in many ways, but the most common is through downloads or attachments from emails. Other methods include infected USB drives, hacked websites, malicious pop-ups, and software vulnerabilities.

Vulnerable software

Vulnerable software is any program that doesn’t have the latest security updates installed. This leaves your computer open to attack by malware that exploits those vulnerabilities.

Excessive privileges

When you grant programs too many rights and permissions, they can easily infect your system and cause all sorts of damage. This is why it’s important to be very careful about which programs you give elevated access to and to revoke those permissions when they’re no longer needed.

Weak passwords

It’s no secret that weak passwords are a major security vulnerability. Hackers can easily exploit them to gain access to your computer, email account, or online financial accounts. Hackers can use brute force methods to guess your password, or they can simply buy lists of common passwords online. Either way, it’s important to use strong passwords to protect yourself from these threats.

Prevent Access

Regulate Access

Firewalls

Monitor Access

Malware Removal or Blocking

Antivirus Software, like Antiviruses, Security Suites and Virus Removal Tools

Signature-based detection

Signature-based detection is a method of malware detection that relies on a list of known malware signatures. When a piece of software is scanned, its signature is compared to the signatures in the database. If there is a match, the software is considered to be malware.

Heuristics

Heuristics analysis is a technique that anti-virus software uses to identify malware. It is a kind of detective work, where the software looks at the characteristics of files and programs to see if they match up with known malware. This can be tricky, because new malware is often designed to look like innocent files, but heuristics analysis can help anti-virus software to stay one step ahead.

Rootkit detection

Rootkit detection is a method of malware identification that involves looking for signs of infection that are not typically visible to the naked eye. This can include things like hidden files or folders, unusual process activity, and changes to system settings that have been made without the user’s knowledge.

Real-time protection

A type of malware identification procedure, that can scan files as they are being accessed or downloaded, and identify any that match known patterns of malware. This can help to prevent malicious code from being executed on a computer, and can also provide a way to remove any malware that may have already been installed.

Clario

MacKeeper

Intego

Virus Barrier

Mac Internet Security

Quick Heal

Webroot

Cheetah Mobile

Sourcefire