{"id":29,"date":"2022-02-01T11:19:37","date_gmt":"2022-02-01T11:19:37","guid":{"rendered":"https:\/\/threatinfo.net\/articles\/?p=29"},"modified":"2022-03-02T20:58:33","modified_gmt":"2022-03-02T20:58:33","slug":"exploit","status":"publish","type":"post","link":"https:\/\/threatinfo.net\/articles\/exploit\/","title":{"rendered":"Exploit threat description"},"content":{"rendered":"

Exploit malware is a pretty new type of malware. Well-known stuff like worms, viruses, spyware or adware have been present since the early \u201900s, one may say – since the late \u201990s. Meanwhile, exploits in their current state appeared in the mid-10\u2019s, after the first ransomware boom.<\/p>\n

Exploit virus threat summary<\/h2>\n

This malware type is an amalgamation of the downloader, backdoor and worm malware. The purpose of the exploit is to find the security breaches in the system, make them available to use during the malware attack, and then download the malware. This virus is either able to grant remote access to your PC – in case cybercriminals need it for some thin setup.<\/p>\n

Obviously, such a wide functionality is overkill for attacks on individual users. In most cases for sole users malware distributors utilize separate dropper trojans or script-based malware<\/a>. The main scope for these malware types is attacks on companies, either small or large. Cybersecurity analysts consider China as the main source of exploit viruses that are created specifically for the cyberattack on a certain company.<\/p>\n

Why do they need a fresh one for each case?<\/h3>\n

The need for such a specification hides in a specific set of exploitable apps used in each company. One corporation uses MS Exchange, another has macros allowed in MS Office. In the third one, workers use Adobe Creative Cloud and all supplementary software. In fact, it is hard to name a corporate product that does not contain any exploits. But the main value for cybercriminals is to create ones that allow them to escalate privileges, or to perform the actions without the privileges at all.<\/p>\n

List of the exploit examples<\/h4>\n
\n
\n