What is Computer Virus and Malware? What Are Their Types?

Computer viruses are small programs capable of causing great inconvenience to individuals, companies, and other institutions, after all, they can erase data, capture information, alter or impede the operation of the operating system, and so on. As if that were not enough, there are other similar software, such as  Trojan horses,  worms, hijackers,  spyware, and ransomware. In this text, you will learn a little about how these true "digital plagues" act and learn the basic differences between them.

Before, What is Malware?

It is common for people to call viruses any program for malicious purposes. But, as the first paragraph of the text indicates, there are several types of "digital plagues", viruses being just one category of them.

Currently, a more heated term is used to generalize these programs: the name malware, a combination of the words malicious and software which means "malicious program". Therefore, malware is nothing more than a name created for when we need to refer to malicious software, be it a virus, worm, spyware, etc.

It is important to note that the word "computer" is used in this text in the broadest way, considering the various types of computing devices that exist: desktops, servers, smartphones, tablets, and so on.

It is also worth noting that malware is not limited to a single platform. There are those who think, for example, that there are only digital plagues for Windows, but that is not true. What happens is that the Microsoft family of operating systems is more popular and therefore more targeted. As there is no 100% secure software, malware can also be developed to attack any other platform, after all, there is always someone willing to discover and exploit its deficiencies.

What is a Computer Virus?

Illustrative image of virusesAs you already know, a  virus is a program with malicious purposes, capable of causing inconvenience with the most diverse types of actions: there are viruses that erase or alter users' files, which impair the functioning of the operating system by damaging or altering its functionality, which cause excess traffic on networks, among others.

Viruses, like any other type of malware, can be created in several ways. The first ones were developed in programming languages ​​like C and Assembly. Today, it is possible to even find tools that help in its creation.

How Do Viruses Act?

Viruses receive this name because they have propagation characteristics that resemble real viruses, that is, biological ones: when a virus contaminates a computer, in addition to carrying out the action for which it was programmed, it also tries to spread itself to other machines, just as they do biological viruses in the invading organisms.

In the past, viruses had a very limited range of action: they spread, for example, whenever a contaminated floppy disk was read on the computer. With the emergence of the internet, however, this situation has changed dramatically, for the worse.

This is because, with the internet, viruses can spread much faster and infect a much more significant number of computers. For this, they can explore several means, among them:

• Security flaws ( bugs ): operating systems and other programs are not perfect software and can contain flaws. These, when discovered by people with malicious purposes, can be exploited by viruses, allowing contamination of the system, often without the user noticing;
• E-mails: this is one of the most explored practices. The user receives messages that try to convince him to execute a file attached or present on a link. If the user does it without realizing that he is being deceived, his computer will surely be contaminated;
• Downloads: the user can download a file from a specific website without realizing that it may be infected.

Viruses can also spread through a combination of means. For example, a person in an office can execute an e-mail attachment and thereby contaminate your computer. Then this same virus can try to exploit security holes in other computers on the network to infect them.

Other Types of Malware

As you already know, viruses are not the only malware that exists. The definition of what the pest is or does not depend essentially on its actions and ways of propagation. Here are the most common types:

Trojan Horse (Trojan)

Trojan horses  (or  Trojans ) are a type of malware that allow some way of remote access to the computer after infection. This type of pest can have other features, such as capturing user data to transmit it to another machine.

In order to be able to enter the computer, the Trojan horse usually passes for another program or file. The user can, for example, download it thinking that it is a tool for a specific purpose when, in fact, it is a trojan.

This type of malware is not designed to replicate itself. When this happens, it is usually a joint action with a virus.

Worm

The worms  (or maggots) can be interpreted as a more intelligent type of virus than others. The main difference is in the form of propagation: worms can spread to other computers quickly - either over the internet or via a local network - automatically.

It is explained: in order to act, the virus needs to have the "support" of the user. This occurs, for example, when a person downloads an infected attachment from an email and executes it. Worms, in turn, can infect the computer in a totally discrete way, exploiting flaws in applications or the operating system itself. Of course, a worm can also rely on a user's action to spread, as generally this type of malware is created to infect as many computers as possible, making any means that allow it to be acceptable.

Spyware

Spywares are programs that "spy" on users' activities or capture information about them. To infect a computer, spyware is often "embedded" in the software of questionable origin, often offered as freeware or shareware.

The captured data is later transmitted over the internet. This information can range from user browsing habits to passwords.

Keylogger

Keyloggers are small applications that can be embedded in viruses, spyware, or software of doubtful origin. Its function is to capture everything that is typed by the user. It is one of the ways used to capture passwords.

Hijacker

Hijackers are programs or scripts that "hijack" internet browsers. The main victims were the older versions of Internet Explorer. A hijacker can, for example, change the browser's home page and prevent the user from changing it, display advertisements in new windows, install toolbars, and prevent access to certain websites (pages of antivirus companies, for example). Fortunately, today's browsers have more security features, considerably limiting the action of this type of digital pest.

Rootkit

This is one of the most dangerous types of malware. They can be used for various purposes, such as capturing user data. So far, nothing new. What makes rootkits so threatening is their ability to hinder their detection by antivirus or other security software. In other words, rootkits are able to "camouflage" themselves in the system. For this, rootkit developers can make use of several advanced techniques, such as infiltrating malware into active processes in memory, for example.

In addition to being difficult to detect, rootkits are also difficult to remove. Fortunately, their complexity of development means that they are not very numerous.

Ransomware

Ransomware is a type of malware with a bolder "purpose": once active, the pest can block or limit (or allow its creator to do it remotely) access to files, folders, applications, entire storage units or even prevent the use of the operating system. To release these resources, the ransomware usually shows messages demanding payments. It is as if the computer has been hijacked.

To convince the user to pay the required amount, the message may contain threats or blackmail, saying, for example, that important data will be deleted or that private images of the person will be published on the internet if payment is not made.

Users who have their computer infected with ransomware should not give in to pressure and pay, not least because, not infrequently, nothing happens when this is done. Ideally, the person should use security software (endpoint security software) to try to remove the pest or, if unsuccessful, look for someone they can trust to do so.

Why Does Your Windows - Not Just Windows 10 - Need Endpoint Security?

Windows 10 and Endpoint Security

Windows 10, despite being considered the most secure Windows operating system, is not without its flaws. Security experts have proven that Windows' built-in security features, such as Windows Defender, Firewall, etc., are also proving ineffective.

Therefore, companies using the Windows 10 operating system need endpoint security to protect the various terminals that connect to the network and to protect the network itself.

Does Your Windows 10 Need Endpoint Security?

Windows security tools will never be enough. Because today's security attack vectors are too many to manipulate. This means that we no longer live in a world where email attachments or web downloads are the only sources of malware infection.

Simply put, your Windows operating system needs additional layers of protection in the form of antivirus for windows or, perhaps, much more, depending on your needs.

With that in mind, let's take a look at how you can protect your Windows operating system from various security threats:

1 - Keep your Windows operating system up to date: Today is Windows 10. Tomorrow there will be another new version. Whatever it is, make sure your PC is updated to the latest version. This is probably the best thing you can do besides providing antivirus for Windows. Because the latest update is usually the one that protects users against all known security vulnerabilities.

2 - Make sure that other applications are up to date: What's inside your Windows operating system is also important. We mean other major programs and applications. Make sure that they are all up to date and contain the latest security fixes. Because it is a well-known fact that hackers try to exploit popular software like Java, Adobe Flash, Adobe Acrobat, etc.

3 - Use the proactive security solution: Unfortunately, the traditional antivirus alone will not be enough. Especially when it comes to combating modern malware, which employs sophisticated methods. Therefore, to face the ever-changing landscape of digital security threats, users need proactive security solutions, such as Internet security (for home users) and Endpoint protection (for companies).

4 - Use local account instead of Microsoft account: If you are using Windows 10, it is better to avoid the Microsoft account and choose a local account, because using the Microsoft account means saving some of your personal data in the cloud, which is not such a wise thing to do. To choose a local account, go to Settings> Accounts> Your information and select Sign in with a local account.

5 - Maintain user account control always activated: UAC (User Account Control) is a Windows security responsible for preventing unauthorized changes (initiated by applications, users, viruses, or other forms of malware) in the operating system. This ensures that changes are applied to the operating system only with the approval of the administrator. So always keep it on.

6 - Make regular backups: Be prepared with the “worst” in mind when it comes to dealing with security threats. Therefore, make regular backups of your system (both online and offline) so that all of your data is not lost, should your PCs be affected by security threats, or encounter an irreparable hardware problem.

7 - Keep your browser updated: Browsers are what we use to access the Internet. Therefore, security vulnerabilities in them mean an entry path for security threats. So, as with the operating system and other applications, keep your web browser up to date as well. Other security measures you can take: 1) opt for private browsing mode to prevent sensitive details from being stored 2) prevent or block pop-ups 3) configure browser security settings to improve security, etc.

8 - Disable location tracking: If you're using Windows 10 or any other version that contains location tracking, it's best to disable it or use it only when absolutely necessary. For example, if you want to know about the local weather or the various shops nearby, etc. To disable Location Tracking, go to Privacy> Location> click the Change button and move the slider from Enabled to Disabled.

9 - Use the Internet wisely: All of the security measures listed here would be rendered useless if you are not cautious while online. Therefore, be sure not to click on dangerous-looking links, download malicious email attachments or other downloads from the Web, avoid visiting suspicious-looking websites, and any other actions that current security practices deem unwise.

The Windows operating system is probably the best, which is why it is very popular and has a lot to follow - despite security threats. And there is nothing wrong with joining your favorite operating system. Just be sure to reinforce it with the right security products, such as Protegent360 Endpoint Security Software, and follow security best practices.

Phishing: Types, Scams, Attacks, and Ways to Prevent Them

Scams are an integral part of our digital world. Cybercriminals use hundreds of attack strategies, and phishing - or phishing in French - is one of the classic representations of this. Although the strategy is not new, Internet crooks continue to employ it with new variations.

The main source of phishing is spam. Skillfully crafted to manipulate their recipients, these emails are designed to bypass your email spam filters in order to appear in your inbox.

Above all, the “phisher” seeks access to confidential and critical personal information and corporate data. Bank details and passwords for access to the corporate network are therefore particularly coveted by scammers.

The many faces of phishing

Digital Bandits Use Different Types of Phishing Techniques.

1. Whale Phishing - the CEO Scam

Whale Phishing, or “whale” for “whale”, is a targeted phishing strategy that aims to hook the “big fish” of an organization. In line of sight: senior executives, directors, and other strategic collaborators. Also, before sending their emails, crooks study their subject from all angles. They personalize their messages by sprinkling them with key information about the organization. From an email address similar to the one used by the tax authorities or other government agency, the sender requests sensitive information or a money transfer. Overall, the email looks very professional, but because it targets smart, high-level people, it has a pretty low success rate.

2. Deceptive Phishing - Objective: to Deceive the User

Used for decades, this phishing strategy is classic. The spammer uses email addresses that are similar to real websites and large businesses - with one variation, which often goes unnoticed by the average internet user. The email asks you to click on a link that points to a bogus webpage or installs malware on your device. The goal? Hack your data and access your personal, secret, or confidential information.

3. Pharming - Insidious Operation of the Deflection

Pharming is another phishing strategy characterized by sending fraudulent emails from genuine sources (banks and social networking sites, for example). These emails urge you to take urgent action on one of your accounts, such as changing your password or taking security measures. The manipulation involves redirecting you to a dummy web page. If the web address used is identical to the source and seems in every way identical to the original site, it is because, with pharming, the crooks also intervene at the level of the  DNS cache. Once your login details are entered on the fake site, the crooks just have to hack your accounts.

4. Spear Phishing - Targeted Phishing

Spear Phishing is a targeted phishing strategy that targets a specific category of people. Emails sent directly to recipients impersonate an authentic source. It could for example be an educational institution or a bank. The use of logos and original signatures aims to reassure the recipient about the authenticity of the message. In the case of spear phishing, hackers have the same will as with other phishing strategies: to steal login information. And for that, they do not hesitate to manipulate the students of educational establishments and the customers of banking or merchant sites.

5. Phishing Attack via Google Docs

A large part of Internet users is dependent on Google applications, from the Play Store to Gmail. A single Gmail account makes it possible to use several Google services. Most of those who choose Google Docs use it to store documents and photos for convenience and security. This makes it easy to understand why Google passwords are a prime target for cyber crooks. These send emails to Gmail users to redirect them to their Google login page. However, once the password is entered, the scammer can access their account and all the stored files.

How to Protect Yourself From Phishing

Phishing is a widely used scam strategy, but not very powerful. We can therefore easily protect ourselves from it.

1. Double Check the Content of Your Messages

The content of most fraudulent emails has a number of flaws. Although the majority of phishing messages are addressed directly to you and use personal information to better trap you, this information is not complete. It is enough to observe carefully the subject of these e-mails to easily judge their authenticity.

Classic trap used by scammers: create a message that plays on the sense of urgency. Above all, stay calm and think before you act; you can only fall for it if you act in a rush.

2. Secure Your Identity

By opting for a VPN or virtual private network, you have an encrypted tunnel for all your online activities. This tunnel masks your identity and your original location; it allows you to connect through secure remote servers. By protecting you from prying eyes, your VPN eliminates any possibility of spying. This way, cybercriminals cannot access your information or your identity.

A strong VPN also protects your connection from malicious attacks; it protects and secures your existence online. Le VPN is a secure barrier that prevents phishing emails from reaching your device.

3. Check All Links

To avoid phishing traps, we recommend that you check email addresses and website links before clicking. Fraudulent addresses sometimes appear to be identical to the original addresses. But beware, they are not the same. For example, the Cyrillic alphabet can be used, and other alphabets feature Latin-like glyphs in current typefaces: the Greek, Armenian, Hebrew, and Chinese alphabets. With a sufficient number of combinations, a fake domain can be created and secured. It is then almost impossible to distinguish the true from the false. On the other hand, on sites where you must enter your passwords and other confidential information, favor secure HTTP (HTTPS) sites. Also, use endpoint security software for multi-layered protection.

Protect Yourself From Digital Hijacking by Ransomware

Ransomware is increasingly gaining prominence among cyber threats because it infiltrates and blocks (encrypts) victims' access to personal files - including documents, videos, and photos. This attack occurs in the background so that the Internet user does not realize what is happening until it is too late. What makes this attack a problem is that the encrypted files are stored on the user's computer, but are inaccessible.

When the attack takes place, the malware informs the user that files have been encrypted and, if they want to recover them, it is necessary to pay an exorbitant amount, usually with bitcoins (virtual currency). Most users who suffer the attack do not have knowledge and experience in technology. Therefore, this problem becomes greater, as they will have to find out what bitcoins are and how to obtain them if they choose to pay the ransom. 

In today's INFO Mail, learn step by step how to protect your data and prevent ransomware attacks with procedures that are recommended by Protegent360.

1 Always make regular backups of your files. It is highly recommended to create two backup copies, one in the cloud (in Dropbox or Google Drive services) and the other recorded on a physical media (external HD or on a USB stick). It is important to give the “plan B” device viewing or reading permissions so that no one will have the possibility to modify or delete the files.

2 Periodically check that the backup is working. There are times when a failure in an accidental way can damage files.

3 Cybercriminals distribute fake emails posing as online stores or banks to entice the user to click on a malicious link that distributes the malware. This method is known as phishing. To avoid it, there is a need to improve your spam settings and never open an attachment sent by an unknown email.

4 Do not trust anyone. Malicious links can be sent through social networks by friends, co-workers, or some gaming partners who have already been infected in one way or another by cybercriminals.

5 Enable options like “Show file extension” in the Windows platform settings. This will make it much easier to distinguish potentially malicious files. As Trojans are programs, the user should keep an eye on files with extensions like .EXE, .vbs, and.SCR.

6 You also need to be aware, as many types of files that look common and familiar can be threats. Cybercriminals can make use of several extensions to mask malware in the photo, video, or document files.

7 Regularly update your operating system, browser, and also other programs that are used in an essential way by each of the users. Criminals tend to exploit vulnerabilities in order to compromise systems and updates will correct existing gaps and flaws, increasing security.

8 If you notice a clandestine or unknown process on the machine, interrupt the internet connection. Hopefully, the ransomware didn't have time to erase the encryption key on the computer, which gives it a chance to restore files. However, it is worth mentioning that the newest versions of ransomware have managed to infect several machines even offline.

9 If the files are encrypted, do not pay the ransom unless instant access to some of your files is critical. Every payment only fuels this illegal business that will thrive the moment people are caught in this scam.

10 If the device is infected, the user should try to find out the name of the malware: it may be an old version and relatively simple to restore the files. Ransomware was less advanced years ago. Always use one advanced security software such as endpoint security software.

How to Work Safely From Home During the Quarantine | Endpoint Security Software

In the face of the coronavirus pandemic, public health experts are calling on everyone who can work from home. As our offices are emptied and we go into home quarantine, we don't have to sacrifice security for personal safety. You can stay safe and connected while you wait for the coronavirus crisis at home.

Here's everything you need to keep your home secure and track down any scammers that might target people working remotely from their home quarantines:

1. Keep Your Home Network Safe

If you work from home (and you should!), Your home network should protect both your personal and professional life. Make sure it's up to the task.

The minimum will be to protect your router with a password if you haven't already. Next, try these additional steps:

Disable broadcast SSID. This will make it difficult to find your home Wi-Fi network (for those who don't need one)

Filter MAC addresses. A MAC address is a network name assigned to a specific device. If your router supports MAC address filtering, it will be much more difficult for any unauthorized device to even try to connect to your router.

Set up a guest network. The Guest Network is the second network you can create on your router for visitor devices. Depending on your router, you can apply different security rules for two different networks. In this case, protect your home and work devices with the strictest security guidelines and leave a friendly ruleset for guest devices.

Install a VPN on your router. If you've set up adequate Wi-Fi encryption on your router, you can set up a VPN on your router. This has unique advantages and disadvantages.

2. Use a Separate Device or Account to Work

It's better to keep your personal and professional devices and accounts separate. This way, if one account or device is compromised, the other remains safe.

If you are working on a computer, chances are you can do it on a laptop. This will be your best bet as it will already contain all the security tools your company could provide.

You can also use a separate user account on your home device. However, make sure you have all the applications you need to work safely. If you rarely log into this account, it is imperative that you update all your software before getting started. Older versions may be incompatible with your colleagues' software, and important security updates may be missing.

3. Use Corporate Cybersecurity Tools

There are many different tools that can help protect employees when they work from home. One of the simplest and most powerful Protegent360 endpoint security software for Individuals. 

Many other solutions are also available. Personal tools - from secure browsers and browser extensions to secure messaging apps - help you and everyone else stay safe. Before leaving your office to set up a convenient home quarantine, ask your system administrator if there is anything you should install first.

4. Encryption of Confidential Files in Transit and in Storage.

Your company's central servers and networks may be secure (hopefully), but when all employees work from home, anything can happen.

Luckily, there are tools out there that allow you to encrypt sensitive files both at rest and while they are being sent. Regardless of where you work from or where you send your files, they will be safe if you encrypt them. By linking your account with your colleagues, you can ensure end-to-end encryption of your most important files.

5. Stay on Top of Cybersecurity and Social Engineering

Hackers and crooks know that many companies will send their workers home, so they will try to exploit the situation in any way they can. Conversations that you once could have face-to-face with colleagues will now take place online, making them easier to use.

Read about the different forms of social engineering and phishing so you know what to look out for. Now more than ever, scammers will try to impersonate your colleagues or managers in order to force you to abandon confidential company information. You will find plenty of advice in the links above, but here are some basics:

Double-check the sender. Was the instant message you just got from your boss sent by John.Doe or John_Doe? Which one is right?

Do not download or click on anything until you are sure the sender is legitimate. Even so, you might want to check with your colleague before doing anything particularly delicate, like sending a large money order.

Maintain redundant communication channels. If you are not sure if your colleague's account is spelled correctly, call them and check again. If you're going to download or click something in your colleague's email, consider sending them messages first. This will make it harder for false messages to hit the target.

6. Avoid Public Wi-Fi

The best reason to avoid public Wi-Fi right now is that you should avoid public places and travel, period! However, if you must exit, you must take all precautions - both for your health and for your cybersecurity.

Public Wi-Fi is always dangerous, as it is much less secure than private Wi-Fi and is much more likely to be connected to (or manipulated by attackers, as is the case with the evil dual hotspot). Wi-Fi isn't the only danger in public places. Here are just a few of the other threats you may face when working in public:

USB chargers. Usually, a USB charger is just a charger. However, sometimes public chargers can be equipped or jailbroken with hardware or software that can install malware on your device or track your communication. Stick to those you trust at home.

Screen spies. If you usually work in an office, you can openly discuss sensitive or confidential topics. By working in public, you can pass this information on to someone looking over your shoulder. You will eliminate this risk by working from home alone or with people you trust.

Don't forget, however, that your physical health is of utmost importance! Public health experts say staying away from public places will keep you healthy, and we think that will keep you safe as well.