Malware and Cybersecurity Basics

The term 'Malware' is a portmanteau of 'malicious' and 'software', representing any software intentionally designed to cause damage, disruption, or unauthorized access.

Ransomware is malware that encrypts data or locks a computer system, demanding payment for restoration. Cryptotrojan is an older/alternate term for similar malware that encrypts files and holds them hostage. Both terms describe malware that demands payment to restore access to data or systems.

chkrootkit is a widely used, classic Unix-based security tool designed to locally check for signs of a rootkit on a system.

Cross-site scripting (XSS) is a vulnerability that allows malicious users to inject client-side scripts into web pages viewed by other users. The statement correctly describes this security issue.

KMKY is a Trojan horse program that originated and was released from India. The other options like Nimda have different international origins.

Devolve is a known HTML-based virus that infects web pages through HTML scripts. HTML viruses typically use script code (JavaScript, VBScript) embedded in HTML to execute malicious actions when pages are loaded. Infector, Delf, and Argentino are not classified as HTML viruses (they're typically executable/binary malware).

None of the listed Trojans (Nautical, Delf, Backage) utilize Port 129 (Password Generator Protocol) for their primary attacks, making "None of the above" the correct answer.

Phoenix II is a Trojan horse program compiled and written in Visual C++, whereas other options like ADM worm are written in different languages such as C or shell script.

RHS is a Trojan specifically designed to target and run on the OS/2 operating system, unlike Nimda or Slapper which target Windows and Linux/Unix systems respectively.

Antigen, Barok, and BSE are all Trojans that utilize port 25 (SMTP) to send out stolen information or spam, making "All of the Above" the correct choice.

The Slapper worm/Trojan targets Apache web servers running SSL, utilizing port 443 (HTTPS) to exploit a vulnerability in OpenSSL and establish a peer-to-peer DDoS network.

Chode is a well-known Trojan horse written in DOS batch language. It executes malicious commands using standard command-line instructions on Windows/DOS systems.

Wipe is a destructive Trojan horse written in JavaScript that targets Windows systems by deleting files on the hard drive. The other options are written in different languages.

Creeper (1971) is widely recognized as the first computer virus/worm, running on ARPANET PDP-10 systems and displaying 'I'm the creeper, catch me if you can!'. While Rother J (a 1971 Apple II virus) is sometimes called first, Creeper predates it. Wabbit and Elk Cloner came later.

KMKY is a Trojan horse program that originated and was released from India. The other options like Nimda have different international origins.

Devolve is an early HTML-based virus that executes malicious scripts within web browsers or HTML-enabled email clients. The other options are binary executables or written in other languages.

None of the listed Trojans (Nautical, Delf, Backage) utilize Port 129 (Password Generator Protocol) for their primary attacks, making "None of the above" the correct answer.

Phoenix II is a Trojan horse program compiled and written in Visual C++, whereas other options like ADM worm are written in different languages such as C or shell script.

RHS is a Trojan specifically designed to target and run on the OS/2 operating system, unlike Nimda or Slapper which target Windows and Linux/Unix systems respectively.

Antigen, Barok, and BSE are all Trojans that utilize port 25 (SMTP) to send out stolen information or spam, making "All of the Above" the correct choice.