什么是:犯罪软件

From Information Security Terms
Revision as of 08:51, 18 March 2020 by 8TG1K2 admin (talk | contribs) (Created page with "==犯罪软件即服务(Crimeware即服务或CaaS)== 随着云计算的普及,“作为服务的东西”一词的确很普遍。诸如软件即服务(SaaS)之类的...")
Jump to navigation Jump to search
Other languages:
Bahasa Indonesia • ‎Bahasa Melayu • ‎Deutsch • ‎English • ‎Tiếng Việt • ‎Türkçe • ‎español • ‎français • ‎italiano • ‎português • ‎русский • ‎العربية • ‎فارسی • ‎हिन्दी • ‎中文 • ‎日本語 • ‎한국어

什麼是犯罪軟件

犯罪軟件是所有惡意軟件程序的總稱,其目的是促進和自動化Internet上的非法活動。 犯罪軟件可以是病毒,間諜軟件或任何可用於犯罪的惡意軟件,例如:

  • 盜竊個人數據(姓名,身份證號碼等);
  • 盜竊財務信息(銀行卡號);
  • 盜竊商業機密或出售或勒索/勒索的機密信息;
  • 盜竊聯繫人列表和電子郵件地址以作進一步轉移或出售;

通常採取上述措施是為了給犯罪軟件的發行者帶來一定的經濟利益,而不僅僅是以玩笑的形式給用戶帶來不便。

犯罪軟件即服務(Crimeware即服務或CaaS)

隨着雲計算的普及,「作為服務的東西」一詞的確很普遍。諸如軟件即服務(SaaS)之類的產品使組織可以使用特殊功能,而無需負責維護和保護基礎架構。通過將基礎架構維護任務外包到中央業務模型之外,這提供了很多優勢,並使企業更容易擴展和專注於主要業務領域。

Unfortunately, this model was adopted by cybercrime, so such offers 'as a service' began to appear. Traditionally, a cybercriminal had to have deep computer knowledge and be a jack of all trades. Crimeware as a Service allows you to specialize in a specific narrow area, renting the necessary services from other cybercriminals as necessary. Crimeware as a Service has become an important component of the underground economy. CaaS takes cybercrime to the next level, making it more organized, automated, and accessible to criminals with limited technical skills.

One of the most common types of criminal software is a phishing kit, which is a set of convenient tools that allow people with minimal technical skills to launch phishing sites. Typically, such a kit includes website development software (including graphic files, content) that can be used to create compelling simulations of authorized sites, and spamming software (to automate the mass mailing process).