什么是:犯罪软件

From Information Security Terms
Revision as of 08:51, 18 March 2020 by 8TG1K2 admin (talk | contribs) (Created page with "==犯罪软件即服务(Crimeware即服务或CaaS)== 随着云计算的普及,“作为服务的东西”一词的确很普遍。诸如软件即服务(SaaS)之类的...")
Jump to navigation Jump to search
Other languages:
Bahasa Indonesia • ‎Bahasa Melayu • ‎Deutsch • ‎English • ‎Tiếng Việt • ‎Türkçe • ‎español • ‎français • ‎italiano • ‎português • ‎русский • ‎العربية • ‎فارسی • ‎हिन्दी • ‎中文 • ‎日本语 • ‎한국어

什么是犯罪软件

犯罪软件是所有恶意软件程序的总称,其目的是促进和自动化Internet上的非法活动。 犯罪软件可以是病毒,间谍软件或任何可用于犯罪的恶意软件,例如:

  • 盗窃个人数据(姓名,身份证号码等);
  • 盗窃财务信息(银行卡号);
  • 盗窃商业机密或出售或勒索/勒索的机密信息;
  • 盗窃联系人列表和电子邮件地址以作进一步转移或出售;

通常采取上述措施是为了给犯罪软件的发行者带来一定的经济利益,而不仅仅是以玩笑的形式给用户带来不便。

犯罪软件即服务(Crimeware即服务或CaaS)

随着云计算的普及,“作为服务的东西”一词的确很普遍。诸如软件即服务(SaaS)之类的产品使组织可以使用特殊功能,而无需负责维护和保护基础架构。通过将基础架构维护任务外包到中央业务模型之外,这提供了很多优势,并使企业更容易扩展和专注于主要业务领域。

Unfortunately, this model was adopted by cybercrime, so such offers 'as a service' began to appear. Traditionally, a cybercriminal had to have deep computer knowledge and be a jack of all trades. Crimeware as a Service allows you to specialize in a specific narrow area, renting the necessary services from other cybercriminals as necessary. Crimeware as a Service has become an important component of the underground economy. CaaS takes cybercrime to the next level, making it more organized, automated, and accessible to criminals with limited technical skills.

One of the most common types of criminal software is a phishing kit, which is a set of convenient tools that allow people with minimal technical skills to launch phishing sites. Typically, such a kit includes website development software (including graphic files, content) that can be used to create compelling simulations of authorized sites, and spamming software (to automate the mass mailing process).