Polymorphic and metamorphic virus
A polymorphic virus is malware that changes its appearance with each infection, typically by encrypting its code with a different key and altering the routine that decrypts it, so every copy looks different while doing the same thing. A metamorphic virus goes further and rewrites its entire code each time. Both aim to evade signature-based antivirus, which matches known code patterns.
How TecnetOne handles it: Managed Endpoint Protection
polymorphic malware, metamorphic virus, metamorphic malware, mutating malware
Related terms
Banking trojan
A banking trojan is malware that poses as a legitimate app or file to steal online banking credentials, card data and verification codes. It often displays fake screens on top of the real banking app or logs what the user types. For example, a fake package-delivery app for Android that requests accessibility permissions so it can read incoming text messages.
Wiper malware
Wiper malware is a type of malicious software designed to destroy data irreversibly by overwriting files, disks or the MBR (master boot record) so that machines become unusable. Unlike ransomware, it does not seek a ransom, although it sometimes poses as ransomware, as NotPetya did in 2017. The main defense is isolated or immutable backups that are tested regularly.
Boot sector virus
A boot sector virus is a type of malware that infects the area of a disk a computer reads at startup, such as the MBR (master boot record), so it loads before the operating system. It once spread through floppy disks and USB drives; its modern variants, known as bootkits, target UEFI (Unified Extensible Firmware Interface) firmware.
Macro virus
A macro virus is malware written in the macro language of applications such as Word or Excel, typically VBA (Visual Basic for Applications), that runs when someone opens the document and enables macros. It usually arrives as an invoice or quote attached to an email. Recent versions of Microsoft Office block macros in files downloaded from the internet by default.
Infostealer
An infostealer is a type of malware built to steal information stored on a device, especially browser passwords, session cookies, card data and crypto wallets, and send it to the attacker, often within seconds of infection. Those credentials are sold on the dark web and are a common entry point for ransomware attacks.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.