QuestionQ71

Information Security Threats and Attacks

An international bank recently identified a security breach in its transaction-processing system. The breach involved sophisticated malware that both bypassed standard antivirus software and remained undetected by intrusion detection systems for months. The malware was programmed to intermittently change transaction values and transfer small amounts to a foreign account, making detection difficult because its actions were subtle. Following a thorough investigation, cybersecurity experts determined the nature of this malware. Which of the following best describes the type of malware used in this breach?

  • A Trojan Horse, presenting itself as legitimate software while performing malicious transactions
  • B Rootkit, embedding itself deeply in the system to manipulate transaction processes
  • C Spyware, gathering sensitive information about the bank’s transactions and customers
  • D Ransomware, encrypting transaction data to extort money from the bank
Explanation

A rootkit is malware that establishes deeply embedded, often privileged access while concealing its presence from security tools. That stealth and persistence can allow it to manipulate transaction-processing activity over an extended period without detection.

Community Discussion

No comments yet. Be the first to start the discussion!