Malware unmasked

Posted on 27 Sep 2006 at 10:46

 

Gallery

Malware is a fact of life for internet users, but who is behind it? We shine a light on the darker side of the software world and explain how you can protect yourself.

Your PC may be crawling with software that you didn't install and would certainly be far better off without. This software may be spying on your every move, reporting back the information it gathers to someone who will then use this for their own financial advantage. We're talking about 'malware', a term that describes all manner of malicious software, like damage-causing viruses, modem-hijacking rogue diallers and spyware.

That malware is rife and needs dealing with is not in doubt, but have you ever wondered who is behind this most modern of plagues? With many millions of people now online worldwide, there are bound to be a few bad apples out there. These range from the hardcore virus writers to so-called 'script kiddies', who use programs they seldom understand to create havoc for fun or profit.

Over the next few pages, we look behind the scenes of malware and find out who's responsible for these unpleasant applications and why they do it. We'll also offer some practical tips on combating and preventing the spread of malware.

Malware make-up

In computing's early days, viruses were often released for bragging rights alone, with widespread outbreaks earning a curious form of kudos for the author. But with the creation and subsequent explosion in popularity of the internet, small-time fraudsters and organised crime outfits spotted the potential for profit and promptly moved into the malware business.

The development and distribution of malware is now a booming underground business - and internet users around the world are paying the price. The worst examples of malware are deployed to blackmail businesses, steal identities and drain bank accounts. As a result, there's now a constant battle between the malware writers and security software companies, with each trying to gain the upper hand.

As noted in our introduction, the word 'malware' covers a variety of malicious software, including viruses, spyware and plenty of variants in between. The problem began with the virus - typically a piece of software designed to replicate itself and release a 'payload' of some form, perhaps a cheeky but harmless message or something altogether more sinister, designed to delete or otherwise damage personal files and folders.

The eraliest viruses required user interaction to spread, either by running an infected file or by using an infected disk. But virus writers soon turned to new techniques, such as 'worms' that use vulnerabilities in common applications to spread without user interaction.

Regardless of the matter of transmission, the payload is now where malware writers are focusing their energies. Many viruses employ Trojan techniques, which essentially means purporting to be a legitimate software application in order to mask malicious intent. Trojans range from software that allows the writer full control of a PC to code that searches for personal details, like an email address, which can then be sold to spammers. They can also be used to redirect a web browser to phishing sites that steal login data.

Spyware, meanwhile, is malware that's specifically designed to steal personal information. This includes keyloggers that send back everything typed in be the user, 'screen scrapers' that copy everything displayed on the computer's monitor in the hope of recording confidential information and URL-capture software, which is used to send targeted advertising based on the user's web habits.