What is the most common type of malware?

Trojans are the most common type of malware, disguising themselves as legitimate software to trick users into installing them. Once active, they can steal data, install additional malware, or create backdoor access for attackers.

What is ransomware and how does it work?

Ransomware is malware that encrypts your files and demands payment for the decryption key. Modern ransomware often includes double extortion, where attackers also threaten to publish stolen data if the ransom is not paid.

What is social engineering in cybersecurity?

Social engineering is the manipulation of people into performing actions or divulging confidential information. It exploits human psychology rather than technical vulnerabilities, making it one of the most effective attack methods.

MALWARE DEFINITIONS: KNOW YOUR ENEMY

POSTED: APR 14, 2025 // INTEL // TAGS: THREATS

READ TIME: 6 MIN // THREAT DATABASE

Ransomware is the biggest threat to hospitals and research centres. Malicious hackers are specifically targeting hospitals because of the value of the data they hold. Due to the urgency of the medical data required, hospitals are more likely to pay the ransom.

Threat Classification Matrix

Click a threat type to see its profile.

RAT

CRITICAL

Ransomware

CRITICAL

Banking Trojan

HIGH

Keylogger

HIGH

Phishing

HIGH

Insider Threat

CRITICAL

Types of Trojans

Backdoor Trojans: Remote Access Trojans (RATs) allow an attacker to monitor and control a computer. They can enable webcams and steal passwords.
Banking Trojans: Specifically used to obtain financial details by logging keystrokes or redirecting users to fake banking pages.
Downloader Trojans: Simple programs that connect to a server to download other malicious programs.
Keylogger: Captures keystrokes without the user knowing to steal passwords.
Ransomware: Encrypts files or the hard drive and demands payment for the decryption key.

Insider Attacks

Insider threat is the biggest cause of data loss, malicious or otherwise. A study by the Ponemon institute found that over 2,000 incidents were due to insider negligence by staff or contractors.

Social Engineering

The method of gaining access to sensitive information by manipulating users:

Phishing: Acting as a trusted entity via email to trick users into giving up details.
Spear Phishing: A targeted attack where a specific individual is chosen, using personalized details to trick them.

Related Intel

Demystifying Cyber Jargon → EDR vs Antivirus: The Illusion of Safety → Why Patient Records Are a Goldmine →