Malware is software designed specifically with the goal of executing unwanted and usually damaging functions. Common types of malware include, among others, viruses, worms, and Trojan horses. Malware is usually activated in secret without the knowledge or permission of the user.

These days, malware provides an attacker with extensive communication and control capabilities, as well as a number of functions. Among other purposes, malware may be used to obtain specific passwords, control systems remotely, disable protective software and collect data without authorisation.

The most serious damage that can be caused by malware is the loss or corruption of information or applications. However, the image loss and financial damage that can result from malware can also be significant.

Examples:

Kwistjonijiet marbuta

Links
Tip ta’ link Kwistjoni
is blocked by CON.3.A2 Establishment of Backup Procedures [Process Owner, IT Operation Department] (B)
is blocked by CON.7.A4 Use of Privacy Screens [User] (B)
is blocked by CON.7.A5 Use of Screen/Code Locking [User] (B)
is blocked by CON.8.A16 Appropriate Control of Software Development (S)
is blocked by OPS.1.1.3.A3 Configuration of Auto-Update Mechanisms (B)
is blocked by OPS.1.1.3.A16 Regular Search for Information on Patches and Vulnerabilities (B)
is blocked by OPS.1.1.3.A10 Assuring the Integrity and Authenticity of Software Packages (S)
is blocked by OPS.1.1.4.A1 Creating a Malware Protection Concept (B)
is blocked by OPS.1.1.4.A2 Using System-Specific Protection Mechanisms (B)
is blocked by OPS.1.1.4.A3 Selection of a Virus Protection Program (B)
is blocked by OPS.1.1.4.A5 Operation and Configuration of Virus Protection Programs (B)
is blocked by OPS.1.1.4.A6 Regular Updating of Virus Protection Programs and Signatures (B)
is blocked by OPS.1.1.4.A7 User Awareness and Obligations [User] (B)
is blocked by OPS.1.1.4.A9 Reporting Malware Infections [User] (S)
is blocked by OPS.1.1.4.A10 Using Special Analysis Environments (H)
is blocked by OPS.1.1.4.A12 Using Storage Media Locks (H)
is blocked by OPS.1.1.4.A13 Handling Untrusted Files (H)
is blocked by OPS.1.1.4.A14 Selecting and Using Cyber Security Products to Thwart Targeted Attacks (H)
is blocked by OPS.1.2.5.A19 Remote Maintenance by Third Parties (S)
is blocked by OPS.1.2.5.A20 Remote Maintenance Operations (S)
is blocked by DER.1.A5 Use of Detection Features Included in Systems [Process Owner] (B)
is blocked by DER.1.A9 Use of Additional Detection Systems [Process Owner] (S)
is blocked by DER.1.A10 Use of TLS/SSH Proxies [Process Owner] (S)
is blocked by DER.1.A11 Use of a Central Logging Infrastructure to Evaluate Security-Relevant Events [Process Owner] (S)
is blocked by DER.1.A13 Regular Audits of Detection Systems (S)
is blocked by DER.1.A15 Central Detection and Real-Time Examination of Event Messages (H)
is blocked by DER.2.3.A2 Deciding on a Cleaning Strategy (B)
is blocked by DER.2.3.A4 Blocking and Changing Access Data and Cryptographic Keys (B)
is blocked by DER.2.3.A7 Targeted System Hardening (S)
is blocked by DER.2.3.A9 Hardware Replacement in Affected IT Systems (H)
is blocked by DER.2.3.A10 Modifications to Help Thwart a Repeat Attack (H)
is blocked by APP.1.1.A2 Limiting Active Content (B)
is blocked by APP.1.1.A3 Secure Opening of Documents from External Sources [User] (B)
is blocked by APP.1.1.A11 Controlled Use of Extensions for Office Products (S)
is blocked by APP.1.1.A13 Use of Viewer Features [User] (S)
is blocked by APP.1.1.A16 Checking Document Integrity (H)
is blocked by APP.1.2.A1 Use of Basic Security Mechanisms (B)
is blocked by APP.1.2.A9 Using an Isolated Web Browser Environment (H)
is blocked by APP.1.2.A11 Checking for Malicious Content (H)
is blocked by APP.1.4.A5 Minimising and Checking App Authorisations [Process Owner] (B)
is blocked by APP.1.4.A3 Distributing Sensitive Apps (S)
is blocked by APP.2.1.A12 Monitoring Directory Services (S)
is blocked by APP.2.2.A5 Hardening Active Directory (B)
is blocked by APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B)
is blocked by APP.2.2.A11 Monitoring Active Directory Infrastructure (S)
is blocked by APP.2.2.A12 Backups for Domain Controllers (S)
is blocked by APP.3.2.A3 Protecting File Uploads and Downloads (B)
is blocked by APP.3.2.A14 Integrity Checks and Protection Against Malware (S)
is blocked by APP.3.2.A15 Redundancy (H)
is blocked by APP.3.3.A3 Use of Anti-Virus Programs (B)
is blocked by APP.3.3.A12 Data Encryption (H)
is blocked by APP.4.2.A1 Secure Configuration of the SAP Java Stack (B)
is blocked by APP.4.2.A2 Secure Configuration of the SAP Java Stack (B)
is blocked by APP.4.2.A4 Protection of Standard SAP User IDs (B)
is blocked by APP.4.2.A5 Configuration and Protection of SAP User Administration (B)
is blocked by APP.4.2.A6 Creation and Implementation of a User and Access Control Policy [Department, Developer] (B)
is blocked by APP.4.2.A7 Protection of SAP Databases (B)
is blocked by APP.4.2.A8 Protection of the SAP RFC Interface (B)
is blocked by APP.4.2.A26 Protection of Customers' Own Code in the SAP ERP System (S)
is blocked by APP.4.2.A32 Real-Time Detection and Alerts for Irregular Processes (H)
is blocked by APP.4.3.A3 Basic Hardening of Database Management Systems (B)
is blocked by APP.4.3.A12 Uniform Configuration Standard for Database Management Systems (S)
is blocked by APP.4.3.A19 Protection Against Malicious Database Scripts [Developer] (S)
is blocked by APP.4.3.A24 Data Encryption in Databases (H)
is blocked by APP.4.3.A25 Security Audits of Database Systems (H)
is blocked by APP.4.4.A2 Planning Automation with CI/CD (B)
is blocked by APP.4.4.A4 Separation of Pods (B)
is blocked by APP.4.4.A7 Separation of Networks for Kubernetes (S)
is blocked by APP.4.4.A8 Securing Configuration Files on Kubernetes (S)
is blocked by APP.4.4.A12 Securing Infrastructure Applications (S)
is blocked by APP.4.4.A13 Automated Configuration Auditing (H)
is blocked by APP.4.6.A10 Execution of Operating System Commands (S)
is blocked by APP.4.6.A11 Avoiding Planted Malicious Code (S)
is blocked by APP.4.6.A19 Protection Against Cross-Site Scripting (S)
is blocked by APP.4.6.A21 Ban on Hidden ABAP Source Code (S)
is blocked by APP.5.3.A1 Secure Configuration of E-Mail Clients (B)
is blocked by APP.5.3.A4 Spam and Virus Protection on E-Mail Servers (B)
is blocked by APP.5.3.A7 User Training on the Security Mechanisms of E-Mail Clients (S)
is blocked by APP.5.3.A8 Training Users to Deal with Spam [User] (S)
is blocked by APP.6.A3 Secure Procurement of Software [Procurement Department] (B)
is blocked by SYS.1.1.A9 Using Anti-Virus Programs on Servers (B)
is blocked by SYS.1.1.A37 Encapsulation of Security-Critical Applications and Operating System Components (S)
is blocked by SYS.1.1.A31 Using Execution Control (H)
is blocked by SYS.1.1.A38 Hardening of the Host System by Means of a Read-Only File System (H)
is blocked by SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S)
is blocked by SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S)
is blocked by SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)
is blocked by SYS.1.2.2.A8 Protection of System Integrity (S)
is blocked by SYS.1.2.2.A11 Attack Detection in Windows Server 2012 (H)
is blocked by SYS.1.3.A4 Protection from Exploitation of Vulnerabilities in Applications (B)
is blocked by SYS.1.3.A10 Preventing Further Intrusion When Vulnerabilities Are Exploited (S)
is blocked by SYS.1.6.A3 Secure Use of Containerised IT Systems (B)
is blocked by SYS.1.6.A4 Planning the Provision and Distribution of Images (B)
is blocked by SYS.1.6.A5 Separation of Administration and Access Networks for Containers (B)
is blocked by SYS.1.6.A6 Use of Secure Images (B)
is blocked by SYS.1.6.A9 Suitability for Container Operation (S)
is blocked by SYS.1.6.A10 Policy for Images and Container Operation (S)
is blocked by SYS.1.6.A12 Distribution of Secure Images (S)
is blocked by SYS.1.6.A13 Release of Images (S)
is blocked by SYS.1.6.A14 Updating Images (S)
is blocked by SYS.1.6.A15 Limitation of Resources per Container (S)
is blocked by SYS.1.6.A16 Administrative Remote Access to Containers (S)
is blocked by SYS.1.6.A17 Running Containers Without Privileges (S)
is blocked by SYS.1.6.A18 Application Services Accounts (S)
is blocked by SYS.1.6.A19 Including Data Stores in Containers (S)
is blocked by SYS.1.6.A21 Extended Security Policies (H)
is blocked by SYS.1.6.A23 Container Immutability (H)
is blocked by SYS.1.6.A24 Host-Based Attack Detection (H)
is blocked by SYS.1.6.A25 High Availability of Containerised Applications (H)
is blocked by SYS.1.7.A8 Use of the z/OS Security System RACF (B)
is blocked by SYS.1.7.A9 Multi-Client Capability in z/OS (B)
is blocked by SYS.1.7.A14 Reporting on the Secure Operation of z/OS (S)
is blocked by SYS.1.7.A16 Monitoring of z/OS Systems (S)
is blocked by SYS.1.7.A24 Administration of Storage Media in z/OS Systems (S)
is blocked by SYS.1.7.A33 Separation of Test and Production Systems in z/OS (H)
is blocked by SYS.1.7.A36 Internal Communication Between Operating Systems (H)
is blocked by SYS.2.1.A6 Using Malware Protection Programs (B)
is blocked by SYS.2.1.A24 Dealing with External and Removable Media (S)
is blocked by SYS.2.1.A34 Encapsulation of Security-Critical Applications and Operating System Components (H)
is blocked by SYS.2.1.A32 Use of Additional Safeguards to Protect Against Exploits (H)
is blocked by SYS.2.1.A33 Using Execution Control (H)
is blocked by SYS.2.1.A37 Use of Multi-Factor Authentication (H)
is blocked by SYS.2.2.2.A3 Use of Virus Protection Programs with Windows 8.1 (B)
is blocked by SYS.2.2.2.A5 Local Security Policy for Windows 8.1 (S)
is blocked by SYS.2.2.2.A9 Data Protection and Data Economy in Windows 8.1 Clients [User] (S)
is blocked by SYS.2.2.2.A13 Connection of Windows 8.1 to the Microsoft Store (S)
is blocked by SYS.2.2.2.A14 Application Control Using Software Restriction Policies and AppLocker (H)
is blocked by SYS.2.2.3.A5 Protection Against Malware in Windows 10 (B)
is blocked by SYS.2.3.A4 Kernel Updates on Unix-Like Systems (B)
is blocked by SYS.2.3.A5 Secure Installation of Software Packages (B)
is blocked by SYS.2.3.A12 Secure Use of Appliances (S)
is blocked by SYS.2.3.A18 Additional Kernel Protection (H)
is blocked by SYS.2.4.A2 Using the Security Functions Integrated into macOS (B)
is blocked by SYS.2.4.A9 Using Additional Protection Programs in macOS (S)
is blocked by SYS.2.4.A10 Activating the Personal Firewall in macOS (S)
is blocked by SYS.3.1.A1 Rules for Mobile Laptop Use (B)
is blocked by SYS.3.1.A3 Use of Personal Firewalls (B)
is blocked by SYS.3.1.A9 Secure Remote Access with Laptops (B)
is blocked by SYS.3.1.A6 Security Guidelines for Laptops (S)
is blocked by SYS.3.1.A8 Secure Connection of Laptops to Data Networks [User] (S)
is blocked by SYS.3.2.1.A8 Installation of Apps (B)
is blocked by SYS.3.2.1.A28 Using the Filter Option for Websites (S)
is blocked by SYS.3.2.1.A33 Selection and Installation of Security Apps (S)
is blocked by SYS.3.2.2.A4 Distribution of the Basic Configuration to Mobile Devices (B)
is blocked by SYS.3.2.2.A5 Installing the MDM Client (B)
is blocked by SYS.3.2.2.A7 Installation of Apps (S)
is blocked by SYS.3.2.2.A14 Use of External Reputation Services for Apps (H)
is blocked by SYS.3.2.3.A21 Installation of Apps and Integration of the Apple App Store (S)
is blocked by SYS.3.2.3.A26 No Connections to Host Systems (H)
is blocked by SYS.4.3.A14 Secured and Authenticated Boot Process for Embedded Systems [Developer, Planner, Procurement Department] (H)
is blocked by SYS.4.3.A15 Storage Protection in Embedded Systems [Developer, Planner, Procurement Department] (H)
is blocked by SYS.4.4.A2 Authentication (B)
is blocked by SYS.4.4.A5 Restriction of Network Access (B)
is blocked by SYS.4.4.A6 Integration of IoT Devices into Organisation Security Policies (S)
is blocked by SYS.4.4.A7 Planning the Use of IoT Devices (S)
is blocked by SYS.4.4.A10 Secure Installation and Configuration of IoT Devices (S)
is blocked by SYS.4.4.A11 Using Encrypted Data Transmission (S)
is blocked by SYS.4.4.A13 Deactivation and Uninstallation of Unnecessary Components (S)
is blocked by SYS.4.4.A15 Restrictive Granting of Access Rights (S)
is blocked by SYS.4.4.A16 Elimination of Malware on IoT Devices (S)
is blocked by SYS.4.4.A19 Protection of Administration Interfaces (S)
is blocked by SYS.4.5.A12 Protection Against Malware [User] (B)
is blocked by SYS.4.5.A4 Drawing Up a Policy for the Secure Handling of Removable Media (S)
is blocked by SYS.4.5.A16 Use of Dedicated Systems for Data Scanning (H)
is blocked by IND.1.A3 Protection Against Malware (B)
is blocked by IND.1.A9 Restrictive Use of Removable Media and Mobile Devices in ICS Environments (S)
is blocked by IND.1.A10 Monitoring, Logging, and Detection [OT Operations] (S)
is blocked by IND.1.A12 Establishing Vulnerability Management (S)
is blocked by IND.2.1.A2 Using Secure Transmission Protocols for Configuration and Maintenance [Maintenance Personnel, OT Operations] (B)
is blocked by IND.2.1.A6 Network Segmentation [OT Operations, Planner] (B)
is blocked by IND.2.1.A7 Creating Backups [OT Operations] (S)
is blocked by IND.2.1.A8 Protection Against Malware [OT Operations] (S)
is blocked by IND.2.1.A11 Maintenance of ICS Components [Employee, OT Operations, Maintenance Personnel] (S)
is blocked by IND.2.1.A13 Appropriate Commissioning of ICS Components [OT Operations] (S)
is blocked by IND.2.1.A16 Protecting External Interfaces [OT Operations] (S)
is blocked by IND.2.1.A17 Use of Secure Protocols for the Transmission of Measurement and Control Data [OT Operations] (S)
is blocked by IND.2.1.A19 Security Tests [OT Operations] (H)
is blocked by IND.2.1.A20 Trustworthy Code [OT Operations] (H)
is blocked by IND.2.4.A2 Operation After End of Warranty [OT Operations] (B)
is blocked by IND.2.7.A4 Making Information Security an Integral Part of Functional Safety Management [ICS Information Security Officer] (S)
is blocked by IND.3.2.A9 Secure Exchange of Files Involved in OT Remote Maintenance (S) [Planner, IT Operation Department]
is blocked by NET.3.2.A2 Definition of Firewall Rules (B)
is blocked by NET.3.2.A3 Configuring Appropriate Filter Rules on the Packet Filter (B)
is blocked by NET.3.2.A16 Creation of a “P-A-P” structure (S)
is blocked by INF.13.A11 Adequate Hardening of Systems in TBM (S)
is blocked by INF.13.A12 Secure Configuration of TBM Systems (S)
is blocked by INF.13.A13 Secure Connection of Restricted Trusted Systems in TBM (S) [Planner]
is blocked by INF.13.A15 Protection Against Malware in TBM (S)