Original subtitles

1

Welcome on this lesson we'll start explaining some key malware concepts

2

What is malware?, malicious software o malware is a piece of software that performs unauthorized actions in your equipment

3

Black hackers or crackers use malware to subvert the intended function of the system, in order to spy or take control of your terminal.

4

Often they try to turn your equipment in a zombie for Distributed denial-of-service, you may know this means they infect

5

thousands of machines and use them to send spam or make simultaneous request to the target,

6

this traffic flooding usually takes down the target system.

7

They could infect you to distribute more malware or for cryptocurrency mining, this usually happens when you visit a compromised

8

web site, privilege escalation means they use your terminal to try to acces the entire network.

9

Malware could steal credentials and information in general and could hide into scripts, active content, office documents, pdfs,

10

executables, email and so on.

11

There are some well-known infection vectors that malware use to get into your system, like: Sharing files through email, intranets, usb

12

drives, or bluethoot. If you visit an infected web site you could be victim of cross site scripting, this tecnique inject a malicious script directly

13

into a vulnerable web site if you visit this web site you could get infected.

14

Social engineering. Its main target is to lure you into actions that will compromise your system: steal credentials and execute malware.

15

let me picture one scenario:

16

Imagine you are a man and a beautiful girl ask you to be her friend in any social media program, after few chats

17

she sends you a picture, you happily open it and bingo you now are infected, turns up the image was carrying a malware.

18

You have been victim of a social engineering campaign.

19

Now imagine you receive an email from your bank asking you to urgently update your credentials, you do it and they are stolen,

20

turns out the page you visit for re enter your credentials was a fake one, this is known as phishing

21

and is very popular in social engineering campaigns.

22

Then the main target of social engineering campaigns is to lure you into actions that will compromise your system,

23

usually stealing credentials or downloading and executing malware.

24

Ok, now lets talk about why we bother to conduct a malware analysis.

25

Malware analysis is a research process, its aim is to understand in detail the malware behavior. Its objectives are:

26

Get Indicators of Compromise or signatures, these could be then use in antivirus systems.

27

For example, if the malware connect to a domain and you catch that ip. This connection to this specific ip is an Indicator of Compromise

28

To clean and recover an affected system if necessary. To Detect and neutralize threatens.

29

No further explanations are necesary, we’ll do this in practice.

30

join me at the next lesson to learn more important concepts