Beware of Malware
You may have heard of terms such as virus, Trojan, ransomware, or rootkit when people discuss cyber security. All of these words describe the same thing: programs used by cyber attackers to infect computers and devices. A common term used to describe all these different programs is the word malware. Simply put, malware is softwar—a computer program—used to perform malicious actions. In fact, the term malware is a combination of the words malicious and software. Cyber attackers install malware on your computers or devices to gain control over them or gain access to what they contain. Once the mallware is installed, these attackers can spy on your online activities, steal your passwords and files, or use your system to attack others. Malware can even deny access to your own files, demanding that you pay the attacker a ransom to regain control of them.
Many people have the misconception that malware is a problem only for Windows computers. While Windows is widely used (and thus a big target), malware can infect any device, including Mac computers, smartphones, or even your baby monitor. The more computers and devices cyber criminals infect, the more money they can make. Therefore, everyone is a target, including you.
Malware is no longer created by just curious hobbyists or amateur hackers, but by sophisticated cyber criminals. Their goal is to make money from your infected computer or device, perhaps by selling the data they’ve stolen from you, sending spam emails, launching denial of service attacks, or performing extortion. The people who create, distribute, and benefit from malware can range from individuals acting on their own to well-organized criminal groups or even government organizations. People who are creating today’s sophisticated malware are often dedicated to that purpose—they develop malware as their full-time job. In addition, once they develop their malware, they often sell it to other individuals or organizations, even supplying their “customers” with regular updates and support.
A common technology to protect yourself is antivirus software. Such tools, sometimes called antimalware software, are designed to detect and stop malware. However, antivirus software cannot stop or remove all malicious programs. Cyber attackers are constantly innovating, developing new and more sophisticated malware that can evade detection. In turn, antivirus vendors are constantly updating their products with new capabilities to detect malware. In many ways, it has become an arms race, with both sides attempting to outwit the other. Unfortunately, the bad guys are usually one step ahead. As such, we recommend you use antivirus software on your computers and (when possible) your mobile device, and ensure it is always updated and current. However, understand antivirus software cannot detect and stop all malware. As such, here are some additional steps that will help protect you:
The more current your software is, the fewer vulnerabilities your systems have and the harder it is for cyber attackers to infect them. Therefore, make sure your operating systems, applications, and mobile devices are always updated and current.
Be suspicious. Cyber attackers will attempt to trick or fool you into infecting your computer for them by opening infected email attachments or clicking on malicious links. Common sense is often your best defense.
Backups are critical. They are often the only way you can recover from a malware infection. Make sure all of your computers and mobile devices are regularly backed up.
Ultimately, the best way to defend against malware is keep your software up-to-date, install trusted antivirus software from well-known vendors, and be alert for anyone attempting to fool or trick you into infecting your own system.
© SANS Institute 2018