Malware and social engineering
Malware
Malware is software written to cause harm or to steal.
| Type | What it does |
|---|---|
| Virus | attaches to other files and spreads when they are opened or run |
| Worm | copies itself across a network on its own |
| Trojan | pretends to be useful software, then does harm once installed |
| Ransomware | encrypts files and demands payment for the key |
| Spyware | secretly records what the user does (such as key presses) and sends it on |
Social engineering
People are often the easiest way in.
Social engineering tricks them into giving away information or access.
- Phishing: fake emails or texts that look genuine and push you to click a link or give details. Warning signs: a sender address that is nearly right, urgency ("within 24 hours"), "Dear customer", links that go somewhere else.
- Blagging (pretexting): inventing a story, often by phone, to get information ("I'm the new manager and I've forgotten my password").
- Shouldering: watching someone type a PIN or password.
Defences: staff training, clear policies (never give passwords by phone or email), checking who is calling, and reporting suspicious messages.
This question is in Brainlag Plus