CSCI 4531 Lecture Notes - Lecture 10: Morris Worm, Browser Helper Object, Malware
Document Summary
Program that actively seeks out more machines to infect and each infected. Csci 4531 machine serves as an automated launching pad for attacks on other machines. Exploits software vulnerabilities in client or server programs. Can use network connections to spread from system to system. Spreads through shared media (usb drives, cd, dvd data disks) E-mail worms spread in macro or script code included in attachments and instant messenger file transfers. Upon activation, the worm may replicate and propagate again. First known implementation was done in xerox palo alto labs in the early 1980"s. Worm emails a copy of itself to other systems. Sends itself as an attachment via instant message service. Creates a copy of itself or infects a file as a virus on removeable media. Worm executes a copy of itself on another system. Worm uses a remote file access or transfer service to copy itself from one system to the other.