什么是:犯罪软件

From Information Security Terms
Revision as of 08:51, 18 March 2020 by 8TG1K2 admin (talk | contribs) (Created page with "==什么是犯罪软件== 犯罪软件是所有恶意软件程序的总称,其目的是促进和自动化Internet上的非法活动。 犯罪软件可...")
Jump to navigation Jump to search
Other languages:
Bahasa Indonesia • ‎Bahasa Melayu • ‎Deutsch • ‎English • ‎Tiếng Việt • ‎Türkçe • ‎español • ‎français • ‎italiano • ‎português • ‎русский • ‎العربية • ‎فارسی • ‎हिन्दी • ‎中文 • ‎日本语 • ‎한국어

什么是犯罪软件

犯罪软件是所有恶意软件程序的总称,其目的是促进和自动化Internet上的非法活动。 犯罪软件可以是病毒,间谍软件或任何可用于犯罪的恶意软件,例如:

  • 盗窃个人数据(姓名,身份证号码等);
  • 盗窃财务信息(银行卡号);
  • 盗窃商业机密或出售或勒索/勒索的机密信息;
  • 盗窃联系人列表和电子邮件地址以作进一步转移或出售;

通常采取上述措施是为了给犯罪软件的发行者带来一定的经济利益,而不仅仅是以玩笑的形式给用户带来不便。

Criminal Software as a Service (Crimeware as a Service or CaaS)

With cloud computing becoming widespread, the phrase "something as a service" has become common indeed. Offers such as Software-as-a-Service (SaaS) allow organizations to use specialized functions without responsibility for maintaining and protecting the infrastructure. This gives a plethora of advantages and makes it easierfor a business to scale and focus on the main business areas, by outsourcing infrastructure maintenance tasks outside of the central business model.

Unfortunately, this model was adopted by cybercrime, so such offers 'as a service' began to appear. Traditionally, a cybercriminal had to have deep computer knowledge and be a jack of all trades. Crimeware as a Service allows you to specialize in a specific narrow area, renting the necessary services from other cybercriminals as necessary. Crimeware as a Service has become an important component of the underground economy. CaaS takes cybercrime to the next level, making it more organized, automated, and accessible to criminals with limited technical skills.

One of the most common types of criminal software is a phishing kit, which is a set of convenient tools that allow people with minimal technical skills to launch phishing sites. Typically, such a kit includes website development software (including graphic files, content) that can be used to create compelling simulations of authorized sites, and spamming software (to automate the mass mailing process).