Examkin

Question

Difficulty: EasyMalware Types and Indicators of Compromise

An incident responder notices that a malicious program rapidly infected dozens of systems across an internal network by exploiting a known remote code execution vulnerability, operating completely independently without any user action. Which of the following malware types best describes this threat?

  1. WormAnswer
  2. B
    Trojan
  3. C
    Logic bomb
  4. D
    Firewall control

Answer

Worm
A worm is a standalone malicious program that replicates itself automatically across computer networks by exploiting vulnerabilities without requiring human interaction.

Step-by-Step Solution

1
Analyze the infection vector described in the incident scenario.
The malicious code spreads automatically across systems without requiring user interaction.
Identifying whether propagation is automated or requires user execution distinguishes self-replicating malware from disguised payloads.
2
Match the observed behavior with standard malware classifications.
Self-contained, self-propagating malware that leverages network vulnerabilities without user involvement is classified as a worm.
Worms are specifically defined by their ability to spread independently across network connections.

Key Concept

Malware Propagation Mechanisms (Worm vs. Trojan)
Rate this question

Topics

Malware Types and Indicators of Compromise

More questions from this topic