Malware - What Is It and How To Avoid It

The most common ways people are exposed to malware risks are through email, web sites, phone calls, and software or app downloads. 

• Email: Sending out malware through email is simple and effective for a cybercriminal. Emails may appear to come from trusted sources such as the user’s bank or credit card company, or even a contact within the user’s list. The email will feature an appealing link or attachment that, if clicked on, will direct the user toward a seemingly legitimate version of a trusted website, convincing the user to change a password and send login information to the cybercriminal. The link or attachment is typically a virus that immediately begins collecting data once it is opened. 
• Websites: A cybercriminal may design pop-up ads that warn users they have a virus to entice the user into clicking “OK” to clean their system. Clicking OK installs the virus on the host system. Even going to an unsecure website provides an opportunity for a virus to be downloaded. 
• Phone: Users may receive a call from a cybercriminal claiming to be tech support, stating a virus has been detected on one or more electronic device, and requesting permission to access that device remotely. The cybercriminal will then download a virus, hijack the device, and steal personal and confidential information. 
• Apps: A cybercriminal may insert malicious code in a popular app, and then advertise it as a free app for downloading. Once the user downloads the app, the malware infects the device. 

Cybercriminals can do this from the comfort of home and be located anywhere in the world.  They do not need direct contact with you to be successful.  Cybercriminals can definitely trick users into infecting their own devices.  But malware attacks will not work without the most important ingredient:  YOU! 

This is why it is so important to know what malware is, how to detect it, and how to deal with it. 

The many forms of malware

• Viruses:  A virus is malware that attaches to another program or app and, when triggered, replicates itself by modifying other computer programs and infecting them with its own code. This may cause a device to crash and allow cybercriminals to steal or destroy data. At the very least, it can create performance issues that hinder effective use of the device. 
• Computer worm:  A worm is similar to a virus, but it does not require user interaction to trigger. 
• Trojan horse:  A trojan horse is popular malware that can harm a digital device and its data by crashing the device, deleting files, and stealing confidential information. 
• Ransomware:  Ransomware is malware that will lock a device and deny access to its files and data. Cybercriminals then seek payment to unlock the device.  If the device is infected with Ransomware, the FBI urges users to report these infections to the Federal Internet Crime Center.
• Spyware:  Spyware often appear as pop-up advertisements to deceive users and share their information with third-party entities. 
• Adware:  Adware is advertising-supported software that generates ads automatically for creating revenue. Adware typically is bundled with software installed and then identifies the websites visited to present select advertisements to the viewer. 
• Scareware:  Scareware is a malicious computer program designed to trick the user into buying and downloading unnecessary and potentially dangerous software, such as fake antivirus protection.