Chapter: Malicious Code (Malware)

Welcome! In this chapter, we are going to explore the world of malicious code, commonly known as malware. While using computers is generally safe, there are programs designed specifically to cause trouble. By the end of these notes, you will be able to define malware, identify the three specific types you need to know for your exam, and understand how to stay protected.

Note: This topic is part of Section 3.6 Cyber security. To see how malware fits into the bigger picture of threats, you can also check out the chapters on "Social Engineering" and "Methods to Detect and Prevent Cyber Security Threats".

What is Malware?

The term malware is a combination of two words: malicious and software. It refers to any program or code that is intentionally designed to cause harm to a computer, a network, or the data stored on them, or to gain unauthorised access.

Quick Definition: Malware is software designed to disrupt, damage, or gain unauthorised access to a computer system.

Did you know? Malware isn't always about "breaking" your computer. Sometimes the goal is to steal your money, your identity, or even your computer's processing power!

The Three Forms of Malware

For your AQA GCSE exam, you need to be able to explain three specific forms of malware. Don't worry if they sound similar at first; they each have a very specific "personality."

1. Computer Virus

A virus is a piece of code that is designed to replicate (copy) itself. However, it cannot do this alone—it needs a "host" to survive. This host is usually a legitimate program or a file (like a document or a game).

  • How it works: When a user opens the infected file or runs the infected program, the virus "wakes up" and starts spreading to other files on the computer.
  • The Effect: It can delete files, corrupt data, or crash the system.
  • Analogy: Think of a biological flu virus. It needs to enter a human cell to make copies of itself. A computer virus needs a program "cell" to do the same.

2. Trojan

A Trojan (named after the famous wooden horse from Greek mythology) is malware that disguises itself as something useful or harmless to trick the user into installing it.

  • How it works: You might think you are downloading a free game, a helpful utility, or a funny video. Once you run the file, the "useful" part might work, but the hidden malicious code starts running in the background.
  • The Effect: Trojans often create a "backdoor" for hackers to access your computer or install other types of malware.
  • Key Difference: Unlike a virus, a Trojan does not replicate itself. It relies on tricking people into downloading it.

3. Spyware

Spyware is software that secretly monitors a user’s actions and gathers information without them knowing.

  • How it works: It often records what you type on your keyboard (this is called a keylogger), captures your screen, or tracks the websites you visit.
  • The Effect: This stolen information (like usernames, passwords, or credit card details) is sent back to the attacker.
  • Analogy: It’s like having a hidden camera in your room that watches everything you do and reports back to a stranger.

Quick Review Table:

\( \begin{array}{|l|l|l|} \hline \mathbf{Type} & \mathbf{Does it self-replicate?} & \mathbf{Main Characteristic} \\ \hline \text{Virus} & \text{Yes} & \text{Attaches to host files} \\ \hline \text{Trojan} & \text{No} & \text{Disguised as legitimate software} \\ \hline \text{Spyware} & \text{No} & \text{Secretly records user activity} \\ \hline \end{array} \)

Protection Against Malware

Knowing about the threats is only half the battle. You also need to know how to stop them! Here are the primary ways to protect a system from malicious code:

  • Antivirus Software: This is a program specifically designed to detect, quarantine (isolate), and remove malware. It works by scanning files and comparing them against a database of known "signatures" (patterns) of malware.
  • Firewalls: These act as a barrier between your computer and the internet. They monitor incoming and outgoing traffic to block unauthorised access (see Section 3.5 for more on firewalls).
  • Automatic Software Updates: Hackers often use "bugs" or "holes" in software to install malware. Software companies release "patches" (updates) to fix these holes. Keeping your software updated ensures these gaps are closed.
  • Caution with Media and Links: Being careful about clicking links in emails (see Phishing) or plugging in unknown removable media (like USB sticks) can prevent malware from entering the system in the first place.

Key Takeaway: Security is a "layered" approach. Using antivirus software combined with being careful about what you download provides the best protection.

Common Mistakes to Avoid

  • Mistake: Calling all malware a "virus."
    Correction: A virus is just one specific type of malware. "Malware" is the umbrella term for all of them.
  • Mistake: Thinking a Trojan spreads by itself.
    Correction: Trojans do not self-replicate. They rely on social engineering (tricking people) to be spread.
  • Mistake: Assuming antivirus software stops everything.
    Correction: Antivirus is essential, but users still need to be careful and keep their software updated to stay safe from the newest threats.

Summary Checklist

Check if you can answer these questions for your revision:

[ ] Can I define the term "malware"?
[ ] Can I explain the difference between a virus and a Trojan?
[ ] Do I understand that a virus needs a host file to replicate?
[ ] Can I describe the purpose of spyware?
[ ] Can I list at least two ways to protect a computer from malware?

Great job! You’ve covered the essentials of Malicious Code. Ready to move on? Check out the chapter on Methods to Detect and Prevent Cyber Security Threats to see how things like CAPTCHA and Biometrics keep us safe!