SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

What method could a cyber attacker use to infect a system with malware?

1. Sending pop-up messages

2. Tricking a person into opening an infected file

3. Using a worm

4. Manipulating network settings

The correct answer is: Tricking a person into opening an infected file

Tricking a person into opening an infected file is a common and effective method that cyber attackers use to infect systems with malware. This technique leverages social engineering, where an attacker creates a sense of urgency, curiosity, or fear to persuade victims to interact with malicious content. Once the victim opens the infected file, it can execute malicious code that compromises the system, allowing the attacker to gain unauthorized access, steal data, or deploy further malware. While sending pop-up messages can be annoying and may be used in scams, they are less direct in delivering malware compared to convincing someone to engage with an infected file. Similarly, while a worm is a type of malware that can spread across networks without user interaction, the question specifically asks about methods an attacker may use, making the direct deception of a user more pertinent. Manipulating network settings could disrupt connectivity or security, but it does not directly deliver malware in the way that tricking someone into opening an infected file does. Therefore, option B reflects a common and effective tactic used by cyber attackers.