Glossary of virus and spam terms

---------------------------------------------------------------------------

Adware
Description: Adware is a type of advertising display software whose primary purpose is to deliver advertising content in a manner or context that may be unexpected and unwanted by users.

Blacklist
Description: A publicised list, usually commercial, of IP addresses known to be sources of spam. which can be used to create a network blacklist to filter out mail originating from these addresses. A blacklist is also a feature of anti-spam software that allows users to designate IP addresses, domain names and individual email addresses from which no mail will be accepted.

Day zero threat
Description: A day zero threat is a new threat released in the wild before threat detection signatures are available to protect against it. Fast moving threats such as internet worms can cause huge amounts of damage at day zero.

Denial of Service (DoS) attack
Description: Where a hacker sends attachments or other unusual or excessive traffic in an attempt to bring down email systems.

Dialer
Description: Any application whose primary function is to dial a premium rate phone number.

False negative
Description: When anti-spam software fails to identify a spam message as spam.

False positive
Description: When anti-spam software wrongly identifies a legitimate message as spam.

Hacker
Description: Someone who intentionally breaches computer security, usually to cause disruption or gain confidential information such as financial details.

HIPS
Description: A Host Intrusion Prevention System (HIPS) guards against unknown threats. Sophos's HIPS technology uses our anti-virus engine to stop unknown threats by analysing behaviour before code executes.

Keystroke Logger
Description: A program that records users keystrokes with the intention of capturing sensitive information such as credit card details.

Malware
Description: Malware is a general term for a range of malicious software including viruses, worms, Trojan horses and spyware.

Phishing
Description: (Pronounced 'fishing'.) This involves creating a replica of a legitimate web page to hook users and trick them into submitting personal or financial information or passwords.

Potentially unwanted application (PUA)
Description: PUA is a term used to describe an application that is not inherently malicious, but is generally considered unsuitable for the majority of business networks. Potentially unwanted applications include adware, dialers, remote administration tools and hacking tools.

Rootkit
Description: A rootkit is a set of software tools designed to be invisible and placed on a computer by a third party. It is used to conceal running processes, files or system data.

Social engineering
Description: Conning email recipients into opening messages, revealing passwords or providing other confidential information by appealing to their curiosity, gullibility or computing naivety.

Spam
Description: All unsolicited commercial email and unsolicited bulk email that a recipient does not want to receive.


Spyware

Description: Spyware is a term used to describe a broad set of applications that send information from a computer to a third party without the user's permission or knowledge. Spyware Trojans and spyware worms are Trojans and Win32 worms that also exhibit behaviour attributed to spyware.

Trojan
Description: A seemingly legitimate computer program that has been intentionally designed to disrupt and damage computer activity. Trojans are sometimes used in conjunction with viruses. A backdoor Trojan is a program that allows other computer users to gain access to your computer across the internet.

Virus
Description: A computer program that copies itself. Often viruses will disrupt computer systems or damage the data contained upon them. A virus requires a host program and will not infect a computer until it has been run. Some viruses spread across networks by making copies of themselves or may forward themselves via email. The term 'virus' is often used generically to refer to both viruses and worms.

Virus hoax
Description: A warning about a non-existent virus. Usually urge users to forward them to everyone they know.

Worm
Description: A type of virus that does not need a host program. It has the ability to self-replicate and often will use email and the internet to spread.

Zombie
Description: An insecure web server or computer that is hijacked and used in a DoS attack or to send spam.