ITPEC FE Morning April 2023 Question 36

Bot (malware) — malware that sits dormant until remotely activated by an attacker to launch attacks on other computers.

A bot is installed on a victim's machine and connects to a Command & Control (C&C) server. The attacker can then issue commands to the bot — typically to participate in DDoS attacks, send spam, or spread to other systems. A network of bots is called a botnet.

Why not others:
- (b) Rootkit — hides its presence (or other malware) by modifying the OS; its purpose is stealth, not launching attacks on command
- (c) Trojan Horse — disguises itself as legitimate software to trick users into installing it; it doesn't specifically wait for remote activation to attack others
- (d) Worm — self-replicates and spreads automatically across networks without needing an attacker's command to activate

Key rule: "Activated by attackers to attack others" = Bot (remote-controlled malware).

AI-generated — may contain errors