ROOTKIT

A rootkit is software used by a hacker to gain constant administrator-level access to a computer or network. A rootkit is typically installed through a stolen password or by exploiting a system vulnerabilities without the victim's consent or knowledge.

Rootkits may be also presented as a Trojan or even as a hidden file along with a seemingly harmless file. This can be a graphic or even a silly application distributed via email. When the victim clicks the program or graphic, the rootkits are installed on their system without their knowledge.
  • Provide the attacker with complete backdoor access, permitting them to falsify or steal documents.
  • Hide other malware, especially key-loggers. The key-loggers may then be used to access and steal the victim's sensitive data.
  • Enable the attacker to use the infected machine as a zombie computer to trigger attacks on others.
A rootkit is a clandestine computer program designed to provide continued privileged access to a computer while actively hiding its presence. The term rootkit is a connection of the two words "root" and "kit." Originally, a rootkit was a collection of tools that enabled administrator-level access to a computer or network. Root refers to the Admin account on Unix and Linux systems, and kit refers to the software components that implement the tool. Today rootkits are generally associated with malware – such as Trojans, worms, viruses – that conceal their existence and actions from users and other system processes.

Comments