Malware

From Wikispooks
(Redirected from BadBIOS)
Jump to navigation Jump to search

Concept.png Malware
(software)Rdf-entity.pngRdf-icon.png
Exodus 1.png
One of many apps from the Google Play Store which secretly installed the Exodus spyware on its victims' phone.
Interest of• HBGary
• Dragos Ruiu
• Security Without Borders
Bad software, such as spyware or viruses

Malware is an umbrella term for bad computer software. Colloquially, this may include software which just unwanted, or annoying ("scumware", "nagware", "bloatware", "shovelware" etc.) but the primary meaning is software which by design presents a threat to the user, such as computer viruses or spyware. Malware in general is more associated with extortion of money and fraud, but it can be used by anyone with the technical capability for any purpose.

Pre-installed malware

In August 2019, Google warned that tens of millions Of Android smartphones come preloaded with malware, and that "if malware or security issues come as preinstalled apps, then the damage it can do is greater".[1] A related problem with the presence of malware in the firmware of smartphones dates back to early 2014, it is a form of backdoor via hardware which can not be deleted, or only with highly specialised equipment.[2][3]

After a vulnerability was found in the Lenovo Solution Centre, Lenovo left it unfixed, but changed the software's end-of-life date to make it seem less important.[4]

Hardware backdoors

Full article: Backdoor

Backdoors into the hardware of consumer PC's are possible and even likely to be used on a wide scale by intelligence agencies, bypassing security monitoring on the level of the operating system.

Spyware

Full article: Spyware

Spyware is created to exfiltrate users' data or facilitate surveillance of users. Its origins include criminal gangs, individuals, private companies[5] and intelligence agencies.

Viruses

Full article: Stub class article Computer virus

Computer viruses may go beyond spying to have a payload intended to destroy data and/or hardware (for example, Stuxnet, intended to damage the Iranian centrifuges used to refine uranium).

Installation

"AT&T employees took bribes to unlock millions of smartphones, and to install malware and unauthorized hardware".[6]


 

Examples

Page nameDescription
BackdoorA covert means of gaining unauthorised and/or unmonitored access to a computing system.
Computer virus
FysbisA simple yet effective Linux Trojan.
Ransomware
Spyware

 

Related Quotation

PageQuoteAuthorDate
Backdoor“Every year, we learn about some issue in WhatsApp that puts everything on their users' devices at risk. Which means it's almost certain that a new security flaw already exists there. Such issues are hardly incidental – they are planted backdoors. If one backdoor is discovered and has to be removed, another one is added”Pavel Durov5 October 2022

 

Related Document

TitleTypePublication dateAuthor(s)Description
File:Operation-shady-rat.pdfreport2 August 2011Dmitri Alperovitch
Many thanks to our Patrons who cover ~2/3 of our hosting bill. Please join them if you can.



References