|
|
Confused? Not sure what the difference is between Worms, Spyware, Malware, Adware, Tupperware?
To lessen the confusion scaremongers have created, here is a short guide on the many Spyware variants out there.
Do I need to worry? What can I do to protect myself?
Spyware
Spyware is a generic term used to describe Adware, Keyloggers, Rootkits, Browser Hijackers, Internet Diallers, Trojan Horses, Worms and Viruses. Two techniques used to infiltrate computers are Drive-By-Downloading and Piggybacking.
Spyware is used interchangeably with Malware.
Adware
The most common form of Spyware is adware. It's a type of Spyware that secretly imbeds itself on your computer and analyses your web browsing habits and presents the user with related advertising in popup windows.
Adware makes use of cookies which are small files that websites generate to store information such as a unique id. Quite often, these cookies hold personal details which if valuable, are captured and stored in a database. Data captured by the adware program is then sold to other companies for a large fee.
Browser Hijackers
Have you ever had your home page change on its own?
Do you keep ending up on random sites? Shopping portals, Gaming Sites, Adult sites.
If so then you have been hit over the head by a Browser hijacker, or hijackware. Another sign is the appearance of many bookmarks which point to, amongst many others, shopping, gaming and adult sites.
The most common hijacker is when you are informed that your computer is infected with a virus and/or Spyware and you need to purchase a program to fix it. Quite often they take the appearance of Windows XP's own security icon (red shield). When purchased these programs do nothing to help fix your computer.
Freeware and email attachments are a common source. Freeware has been known to install hijackware and is in fact mentioned in the small print, so if you are not sure, read the small print.
Keyloggers
Keyloggers are programs which captures and record all keystrokes (keys pressed on a keyboard) a user makes. Keyloggers can capture anything, logins details, passwords, credit card details and other highly sensitive data. This data is then transferred over the internet to the keylog maker for criminal use.
Historically, keyloggers were legitimate programs used by law enforcement agencies to convict known criminals.
Example of how a keylogger can end up on a users computer: E-Greeting Cards. In 2006, fake emails were sent out containing a dangerous link which would redirect the browser to a server and download the keylogger. To look legit, the final redirect was to a real Yahoo greeting card, but without any sender details listed on the e-card.
Rootkits
Rootkits are amongst the most sinister of all types of Malware, going to the operating system and disabling key security features such as firewalls and anti-virus programs. They also install other malicious code, change key settings, access private files, and generally affect security and system performance.
There are several types of rootkits: persistent, memory-based, user-mode, and kernel-mode. In 2007 it is widely expected that there will be an increase in rootkits. It’s not easy to detect a rootkit, as some can survive deletion and reinstall themselves, and a new type of invisible rootkit makes rootkits an even more malicious threat in the future.
Trojan Horse
This form of Malware pretends to be an innocent plug-in, add-on, or even Codec's (Encoder/ Decoder) for multimedia audio or video players such as WinAmp, and other harmless software. The creators of Trojan horses often use an e-mail or a web page written to trick you into installing the Trojan. Trojan horses may live on websites with music or video downloads.
Once installed, Trojans then download malicious code and programs such as keyloggers or worms from remote servers.
Worm (Write Once Read Many)
Worms are a self-propagating (they multiply on their own) form of Malware. Worms hunt for security flaws in other computers on the same network and copies itself onto the new computer through that loophole.
This way of multiplying makes worms particularly dangerous, because they can result in huge network traffic floods or outages, as well as mass infection over a short time.
Virus
The term “virus” has been used fairly generically in the history of computing, but technically speaking, it refers to software that inserts malicious code into existing documents or even other code, and which is then spread by various means.
Today, E-mail is still responsible for about 90% of all viruses spread according to ICSA Labs, but now they are often hidden in password-protected ZIP attachments, making them harder to detect. Viruses have also started showing up in many different forms (macro, file, boot sector, network, email, etc.) and are used for many purposes, including infecting computers to acts as zombies in botnets. These botnets are then used to send spam e-mail. Other viruses are designed not to generate revenue, but to take down Microsoft. A recent example is a Windows virus shipped with Apple video iPod devices.
Drive By Download
In general, the term "drive-by download" (DBD) refers to any Malware installed without user consent or knowledge. This Malware can download Spyware, a virus, etc., and this can happen while viewing a website or popup window, or from an email message.
The reason "drive-by downloads" are so dangerous, is that it requires no action by a surfer to get infected. A hyperlink does not even have to be clicked for the install to occur, as some DBDs exploit browser flaws - especially in Internet Explorer, hence the reason why we promote Firefox as a safer alternative.
Piggybacking
Piggyback Malware refers to embedded malicious code within an otherwise harmless executable file. This means that even trusted sites might cause your computer to be infected. Typically suspect piggyback sites are those having downloads for games, music, and wallpapers, as well as celebrity and adult sites.
Internet Diallers
There are legitimate Internet dialers, but the Malware variety does sinister things including making phone calls to premium rate numbers secretly through your modem.
Internet dialers only work on dialup connections (modem-based). Since not everyone has a broadband connection yet, dialers are still a serious threat and can cost victims a fortune in long distance calls.
Although dialer use is regulated in many countries, Malware dialers obviously do not heed the law. Given this, a simple way to avoid Malware dialer's altogether is by switching to non-dialup Internet service such as cable, DSL, or satellite.
Tupperware
Click Here ;)
Do I need to worry? What can I do to protect myself?
Purging computers of all of the above makes up 70% of what we do. That many computers is indicative of how widespread the problem is, even the most savvy of computer users are getting caught out. To protect yourself you need a combination of tools, together they work well and compliment each other providing a solid wall of protection. A combination of these tools and some basic rules will be enough to protect the majority of systems.
If you feel you may have an infected computer or would like us to install and set up your computer to protect against the aforementioned nasties then call us.
|
|