EC-Council Certified Ethical Hacker (CEH) v12Malware ThreatsHard
A threat intelligence analyst is researching a new malware family that targets specific industrial control systems. The analysis reveals that the malware is designed to be highly modular, with different components for reconnaissance, command and control, and payload delivery. Each component can be updated independently by the attackers, allowing for flexible and evolving attack capabilities. This modular design is a characteristic feature of which type of advanced malware?
- AFileless Malware
- BAdvanced Persistent Threat (APT) malware
- CMacro Virus
- DBootkit
Show answer & explanationAnswer & explanation
Correct answer: B. Advanced Persistent Threat (APT) malware
Advanced Persistent Threat (APT) malware often exhibits characteristics like modularity, stealth, and adaptability to maintain long-term access and achieve specific objectives. The ability to update components independently and evolve attack capabilities aligns with the sophistication seen in APT campaigns.
Why the other options are wrong
- A. Fileless malware operates in memory; while it can be sophisticated, modularity isn't its defining characteristic over APT malware.
- C. Macro viruses are simpler, script-based malware in documents and do not typically exhibit such modular, evolving design.
- D. A bootkit infects the boot sector; modularity isn't its primary defining characteristic.
APT Malware
Malware used in Advanced Persistent Threat (APT) campaigns, characterized by stealth, persistence, modularity, and sophisticated evasion techniques.
- Designed for long-term, targeted espionage or sabotage.
- Often highly modular, allowing for flexible updates and new capabilities.
- Employs advanced evasion and persistence mechanisms.
Memory trick: APTs are Adaptable, Persistent, and Modular.