Chapter Overview
Status: 🟡 NOT STARTED
(Technical mechanisms only — no exploitation techniques)
- Virus (attaches to host files, requires execution)
- Worm (self-propagating, no host file needed)
- Trojan (disguised as legitimate software)
- Ransomware (encrypts files, demands payment)
- Rootkit (hides presence by hooking OS structures)
- Bootkit (infects boot process before OS loads)
- Spyware (covertly collects information)
- How each interacts with OS components covered earlier (processes, drivers, registry, boot)