Malware
Malware is software written to cause harm or to steal.
| Type | What it does |
|---|---|
| Virus | attaches to other files and spreads when they are opened or run |
| Worm | copies itself across a network on its own |
| Trojan | pretends to be useful software, then does harm once installed |
| Ransomware | encrypts files and demands payment for the key |
| Spyware | secretly records what the user does (such as key presses) and sends it on |
Social engineering
People are often the easiest way in. Social engineering tricks them into giving away information or access.
- Phishing: fake emails or texts that look genuine and push you to click a link or give details. Warning signs: a sender address that is nearly right, urgency ("within 24 hours"), "Dear customer", links that go somewhere else.
- Blagging (pretexting): inventing a story, often by phone, to get information ("I'm the new manager and I've forgotten my password").
- Shouldering: watching someone type a PIN or password.
Defences: staff training, clear policies (never give passwords by phone or email), checking who is calling, and reporting suspicious messages.
Name that malware
Focus on how it spreads or what it does once inside.