Malware Delivery Techniques – How Hackers Distribute Malware

1. Which of the following is the most common method for delivering malware?

🔘 A) Sending a malicious USB drive via mail
🔘 B) Phishing emails with malicious attachments
🔘 C) Posting malware on social media
🔘 D) Printing QR codes on physical flyers

✅ Answer: B) Phishing emails with malicious attachments
📝 Explanation: Phishing emails are the most widely used method to deliver malware, often containing malicious links or attachments that trick users into executing harmful code.

---

2. What is a common characteristic of drive-by downloads?

🔘 A) They require explicit user permission before execution
🔘 B) They exploit vulnerabilities in browsers and plugins
🔘 C) They are only delivered via email
🔘 D) They require users to click on a pop-up warning

✅ Answer: B) They exploit vulnerabilities in browsers and plugins
📝 Explanation: Drive-by downloads occur when a user visits a compromised website, which automatically downloads and executes malware by exploiting browser or plugin vulnerabilities.

---

3. How can hackers use USB devices to spread malware?

🔘 A) By disguising malware as a movie file
🔘 B) By using autorun features to execute malware automatically
🔘 C) By requiring users to install a special driver
🔘 D) By hiding malware inside Wi-Fi signals

✅ Answer: B) By using autorun features to execute malware automatically
📝 Explanation: Some malware-laden USBs exploit the autorun feature, which can automatically execute a malicious file once plugged into a computer.

---

4. What technique is commonly used in malvertising?

🔘 A) Malware embedded in video games
🔘 B) Hiding malicious code inside advertisements on legitimate websites
🔘 C) Sending malware via Bluetooth spam
🔘 D) Encrypting malware inside images

✅ Answer: B) Hiding malicious code inside advertisements on legitimate websites
📝 Explanation: Malvertising involves injecting malicious ads into ad networks, which then appear on legitimate websites and can infect users who click on them.

---

5. What is a watering hole attack?

🔘 A) Infecting websites frequently visited by a target group
🔘 B) Spreading malware through public drinking water systems
🔘 C) Hacking only high-security government websites
🔘 D) Infecting computers using phishing emails

✅ Answer: A) Infecting websites frequently visited by a target group
📝 Explanation: A watering hole attack infects specific websites that are commonly visited by the target audience, leading to malware infections.

---

6. How does ransomware typically spread?

🔘 A) Phishing emails and exploit kits
🔘 B) Directly modifying system BIOS
🔘 C) Only through infected USB drives
🔘 D) Manually installed by attackers on physical computers

✅ Answer: A) Phishing emails and exploit kits
📝 Explanation: Ransomware is commonly spread through phishing emails that contain malicious attachments or links, as well as exploit kits that take advantage of software vulnerabilities.

---

7. What is an exploit kit?

🔘 A) A toolkit used by developers to test exploits
🔘 B) A collection of vulnerabilities that automate malware infection
🔘 C) A security tool to detect malware
🔘 D) A set of antivirus software features

✅ Answer: B) A collection of vulnerabilities that automate malware infection
📝 Explanation: Exploit kits are automated tools used by cybercriminals to scan for and exploit vulnerabilities on a user’s device to deliver malware.

---

8. What is a trojanized application?

🔘 A) A legitimate app containing hidden malware
🔘 B) An application that can only be installed on a Trojan horse
🔘 C) A security software designed to fight trojans
🔘 D) A program that removes all malware from a system

✅ Answer: A) A legitimate app containing hidden malware
📝 Explanation: A trojanized application appears to be legitimate software but contains hidden malicious code that executes when installed.

---

9. What role do botnets play in malware distribution?

🔘 A) They directly execute malware on infected machines
🔘 B) They distribute malware to other devices through coordinated attacks
🔘 C) They are used for removing malware
🔘 D) They are security tools used by ethical hackers

✅ Answer: B) They distribute malware to other devices through coordinated attacks
📝 Explanation: Botnets consist of compromised machines controlled by an attacker to distribute malware, launch DDoS attacks, and perform other malicious activities.

---

10. What makes spear phishing more dangerous than regular phishing?

🔘 A) It targets specific individuals with customized messages
🔘 B) It is only used by nation-state attackers
🔘 C) It requires physical access to the victim’s computer
🔘 D) It is undetectable by all security software

✅ Answer: A) It targets specific individuals with customized messages
📝 Explanation: Spear phishing is a targeted attack where attackers craft personalized emails to deceive specific victims into opening malicious attachments or links.

---

11. What is “Malware-as-a-Service (MaaS)” in the cybercrime industry?

🔘 A) A legitimate cybersecurity service for malware testing
🔘 B) Cybercriminals selling pre-made malware to others
🔘 C) A cloud-based malware scanner
🔘 D) A service offered by antivirus companies

✅ Answer: B) Cybercriminals selling pre-made malware to others
📝 Explanation: Malware-as-a-Service (MaaS) allows criminals to rent or buy malware, enabling even non-technical attackers to deploy sophisticated threats.

---

12. Which network protocol is commonly abused to spread malware in corporate environments?

🔘 A) FTP (File Transfer Protocol)
🔘 B) SMB (Server Message Block)
🔘 C) SNMP (Simple Network Management Protocol)
🔘 D) DNS (Domain Name System)

✅ Answer: B) SMB (Server Message Block)
📝 Explanation: SMB is frequently exploited for lateral movement within networks, as seen in attacks like WannaCry and EternalBlue.

---

13. What is the primary function of a Command and Control (C2) server in malware attacks?

🔘 A) To distribute software updates
🔘 B) To communicate with and control infected devices
🔘 C) To provide encryption for malware
🔘 D) To detect and remove malware from networks

✅ Answer: B) To communicate with and control infected devices
📝 Explanation: C2 servers allow attackers to send commands to infected machines, execute malware remotely, and exfiltrate data.

---

14. What is an example of fileless malware?

🔘 A) A malicious PDF attachment
🔘 B) A trojanized mobile app
🔘 C) A PowerShell script executing malicious commands in memory
🔘 D) A self-replicating virus

✅ Answer: C) A PowerShell script executing malicious commands in memory
📝 Explanation: Fileless malware operates in memory without leaving files on disk, making it harder for antivirus software to detect.

---

15. Which type of file is most commonly used in phishing emails to deliver malware?

🔘 A) Executable (.exe) files
🔘 B) Microsoft Office documents with macros
🔘 C) Audio (.mp3) files
🔘 D) ZIP archives with images

✅ Answer: B) Microsoft Office documents with macros
📝 Explanation: Attackers embed malicious macros in Office files (e.g., .docm, .xlsm) to execute malware when opened by users.

---

16. How do cybercriminals use steganography to distribute malware?

🔘 A) By using deepfake videos to trick victims
🔘 B) By hiding malicious code inside images, videos, or audio files
🔘 C) By encrypting malware with public keys
🔘 D) By spoofing DNS records to redirect users

✅ Answer: B) By hiding malicious code inside images, videos, or audio files
📝 Explanation: Steganography allows attackers to conceal malicious payloads within seemingly innocent media files.

---

17. What is a key characteristic of polymorphic malware?

🔘 A) It constantly changes its code to evade detection
🔘 B) It only affects mobile devices
🔘 C) It disables antivirus software permanently
🔘 D) It spreads exclusively via social media

✅ Answer: A) It constantly changes its code to evade detection
📝 Explanation: Polymorphic malware modifies its signature and code on each infection, making signature-based detection difficult.

---

18. What is an example of social engineering for malware delivery?

🔘 A) Exploiting a zero-day vulnerability
🔘 B) Tricking users into installing fake security updates
🔘 C) Using a botnet for DDoS attacks
🔘 D) Encrypting malware files with strong algorithms

✅ Answer: B) Tricking users into installing fake security updates
📝 Explanation: Fake software updates (e.g., “Update your Flash Player” scams) trick users into downloading malware.

---

19. How can attackers use cloud services for malware distribution?

🔘 A) Hosting malicious payloads on cloud storage services
🔘 B) Encrypting all user data in the cloud
🔘 C) Running malware inside containerized environments
🔘 D) Exploiting misconfigured cloud backup systems

✅ Answer: A) Hosting malicious payloads on cloud storage services
📝 Explanation: Attackers upload malware to platforms like Google Drive, Dropbox, and AWS, disguising it as legitimate files.

---

20. What is the main advantage of using encrypted malware communication?

🔘 A) It makes malware impossible to detect
🔘 B) It prevents security analysts from reversing the malware
🔘 C) It avoids detection by network security tools
🔘 D) It allows malware to run without internet access

✅ Answer: C) It avoids detection by network security tools
📝 Explanation: Encrypted malware traffic (e.g., TLS-encrypted C2 communication) prevents security tools from inspecting malicious payloads.

---

21. How do attackers use rogue Wi-Fi hotspots to deliver malware?

🔘 A) By displaying fake Captcha screens
🔘 B) By injecting malicious code into unencrypted traffic
🔘 C) By using RFID skimming techniques
🔘 D) By distributing malware through SMS messages

✅ Answer: B) By injecting malicious code into unencrypted traffic
📝 Explanation: Attackers set up rogue Wi-Fi hotspots to intercept and inject malware into HTTP traffic.

---

22. What is a macro virus?

🔘 A) A virus that infects only kernel-level processes
🔘 B) Malware embedded in document macros
🔘 C) A Linux-only trojan
🔘 D) A highly advanced polymorphic virus

✅ Answer: B) Malware embedded in document macros
📝 Explanation: Macro viruses are malicious scripts embedded in Office documents that execute when macros are enabled.

---

23. How can QR codes be used for malware delivery?

🔘 A) By embedding malicious URLs in QR codes
🔘 B) By storing malware files directly inside QR images
🔘 C) By encrypting malware payloads with QR cryptography
🔘 D) By bypassing antivirus protection using QR-based malware

✅ Answer: A) By embedding malicious URLs in QR codes
📝 Explanation: Attackers create QR codes that redirect users to malware-infected sites when scanned.

---

24. What type of malware disguises itself as a legitimate program?

🔘 A) Worm
🔘 B) Trojan Horse
🔘 C) Adware
🔘 D) Botnet

✅ Answer: B) Trojan Horse
📝 Explanation: Trojan malware appears as a legitimate program but contains hidden malicious functionality.

---

25. What technique allows malware to persist even after rebooting?

🔘 A) Registry modifications
🔘 B) Encrypting the MBR (Master Boot Record)
🔘 C) Running in kernel mode
🔘 D) Using code obfuscation

✅ Answer: A) Registry modifications
📝 Explanation: Malware often adds itself to Windows Registry startup keys to ensure persistence.

---

26. What is an example of malware delivered via supply chain attacks?

🔘 A) Stuxnet
🔘 B) Petya ransomware
🔘 C) EternalBlue exploit
🔘 D) DNS hijacking

✅ Answer: A) Stuxnet
📝 Explanation: Stuxnet was delivered through compromised industrial software updates, a classic supply chain attack.

---

27. How do attackers spread malware through Discord and Telegram?

🔘 A) By using chatbots to send malicious commands
🔘 B) By distributing malware-infected files and links
🔘 C) By modifying users’ profile settings remotely
🔘 D) By launching DDoS attacks against servers

✅ Answer: B) By distributing malware-infected files and links
📝 Explanation: Attackers upload infected files to chat platforms like Discord and Telegram to distribute malware.

---

28. What is rogue software?

🔘 A) Legitimate software with minor vulnerabilities
🔘 B) Fake security programs that deliver malware
🔘 C) Outdated applications
🔘 D) A program that runs on rogue operating systems

✅ Answer: B) Fake security programs that deliver malware
📝 Explanation: Rogue software (e.g., fake antivirus programs) tricks users into installing malware.

---

29. Which type of attack exploits legitimate software updates to deliver malware?

🔘 A) Supply Chain Attack
🔘 B) Zero-Day Attack
🔘 C) Keylogger Attack
🔘 D) Social Engineering Attack

✅ Answer: A) Supply Chain Attack
📝 Explanation: A supply chain attack occurs when attackers compromise software updates or developer tools to distribute malware to many users.

---

30. What is a botnet primarily used for in malware distribution?

🔘 A) Launching DDoS attacks
🔘 B) Spreading malware to other devices
🔘 C) Encrypting files for ransomware
🔘 D) Scanning networks for open ports

✅ Answer: B) Spreading malware to other devices
📝 Explanation: A botnet consists of infected computers controlled by an attacker, often used to distribute malware to new victims.

---

31. How do attackers use browser extensions for malware distribution?

🔘 A) By inserting malicious scripts into web pages
🔘 B) By using browser extensions as keyloggers
🔘 C) By injecting ads that redirect to malicious sites
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious browser extensions can steal data, act as keyloggers, and insert malicious ads or scripts into web pages.

---

32. How does malspam (malicious spam) distribute malware?

🔘 A) By sending phishing emails with malware attachments
🔘 B) By infecting legitimate websites with malicious code
🔘 C) By using RFID-based attacks
🔘 D) By exploiting weaknesses in mobile networks

✅ Answer: A) By sending phishing emails with malware attachments
📝 Explanation: Malspam delivers malware through phishing emails, often with infected attachments or malicious links.

---

33. What is a rogue access point in malware attacks?

🔘 A) A fake Wi-Fi network used to inject malware
🔘 B) A security feature of firewalls
🔘 C) A hacking tool used by ethical hackers
🔘 D) A legitimate feature of VPNs

✅ Answer: A) A fake Wi-Fi network used to inject malware
📝 Explanation: Attackers create rogue access points to trick users into connecting, allowing them to inject malware into traffic.

---

34. How do cybercriminals use Remote Access Trojans (RATs) to distribute malware?

🔘 A) By gaining full control over the victim’s device
🔘 B) By tricking users into executing a trojanized file
🔘 C) By using keyloggers to steal credentials
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: RATs allow attackers to take full control of a victim’s machine, log keystrokes, and install additional malware.

---

35. What is the primary danger of malware spread via torrent downloads?

🔘 A) Users might download copyrighted content
🔘 B) Attackers embed malware in pirated software and media files
🔘 C) Torrent clients are known to be vulnerable to attacks
🔘 D) Torrenting increases CPU usage

✅ Answer: B) Attackers embed malware in pirated software and media files
📝 Explanation: Many pirated software downloads contain trojans, keyloggers, or ransomware, making torrents a common malware delivery vector.

---

36. How can cybercriminals distribute malware through fake tech support scams?

🔘 A) By convincing users to install remote access tools
🔘 B) By exploiting vulnerabilities in outdated browsers
🔘 C) By performing automated brute force attacks
🔘 D) By encrypting user data remotely

✅ Answer: A) By convincing users to install remote access tools
📝 Explanation: Fake tech support scams trick users into installing malware disguised as “security fixes” or “remote support tools.”

---

37. What is the primary method of malware distribution in mobile devices?

🔘 A) Fake apps from third-party app stores
🔘 B) Bluetooth attacks
🔘 C) QR code-based phishing
🔘 D) Social engineering

✅ Answer: A) Fake apps from third-party app stores
📝 Explanation: Attackers upload trojanized apps to third-party app stores, tricking users into installing malware.

---

38. What is the purpose of rootkits in malware attacks?

🔘 A) To gain persistent, hidden access to a system
🔘 B) To execute DDoS attacks on web servers
🔘 C) To encrypt user data for ransom
🔘 D) To send phishing emails

✅ Answer: A) To gain persistent, hidden access to a system
📝 Explanation: Rootkits allow malware to operate stealthily, hiding its presence from antivirus software.

---

39. How do attackers use SEO poisoning for malware distribution?

🔘 A) By manipulating search engine results to lead users to infected sites
🔘 B) By hacking search engine algorithms directly
🔘 C) By tricking users into disabling browser security settings
🔘 D) By embedding malware into website banners

✅ Answer: A) By manipulating search engine results to lead users to infected sites
📝 Explanation: SEO poisoning involves tricking search engines into ranking malicious sites higher in results.

---

40. What is the role of exploit kits in malware distribution?

🔘 A) They automate the exploitation of system vulnerabilities
🔘 B) They distribute security patches for vulnerabilities
🔘 C) They prevent malware from being detected
🔘 D) They are used only in ethical hacking

✅ Answer: A) They automate the exploitation of system vulnerabilities
📝 Explanation: Exploit kits scan for unpatched vulnerabilities and automate malware infection.

---

41. What is a major risk of using cracked software?

🔘 A) It may contain embedded malware
🔘 B) It can slow down system performance
🔘 C) It is often detected by firewalls
🔘 D) It increases the cost of digital licensing

✅ Answer: A) It may contain embedded malware
📝 Explanation: Many cracked software versions include trojans, spyware, or ransomware.

---

42. How does clipboard hijacking work in malware attacks?

🔘 A) Malware replaces copied cryptocurrency wallet addresses
🔘 B) It steals clipboard data for spam messages
🔘 C) It prevents users from copying passwords
🔘 D) It corrupts clipboard files permanently

✅ Answer: A) Malware replaces copied cryptocurrency wallet addresses
📝 Explanation: Clipboard hijackers monitor copied text and replace crypto wallet addresses with attacker-controlled ones.

---

43. How does “clickjacking” contribute to malware distribution?

🔘 A) By tricking users into clicking hidden malicious elements
🔘 B) By replacing browser homepages with phishing pages
🔘 C) By hijacking social media accounts
🔘 D) By executing brute force attacks

✅ Answer: A) By tricking users into clicking hidden malicious elements
📝 Explanation: Clickjacking overlays invisible elements on legitimate web pages, making users unknowingly trigger malware downloads.

---

44. How do cybercriminals use email spoofing for malware distribution?

🔘 A) By making phishing emails appear to come from trusted senders
🔘 B) By sending malware directly from legitimate security firms
🔘 C) By hacking into victims’ email accounts
🔘 D) By embedding malware in email attachments

✅ Answer: A) By making phishing emails appear to come from trusted senders
📝 Explanation: Email spoofing makes malicious emails appear legitimate, increasing the likelihood of successful infections.

---

45. How do malicious browser push notifications distribute malware?

🔘 A) By forcing users to download files via JavaScript
🔘 B) By displaying fake system alerts that lead to malware sites
🔘 C) By modifying browser security settings remotely
🔘 D) By using browser extensions to install malware automatically

✅ Answer: B) By displaying fake system alerts that lead to malware sites
📝 Explanation: Malicious push notifications trick users into clicking fake alerts, which redirect them to malware-infected websites.

---

46. How does DNS hijacking enable malware distribution?

🔘 A) By redirecting users to malicious websites without their knowledge
🔘 B) By modifying domain registration records
🔘 C) By launching DDoS attacks on DNS servers
🔘 D) By encrypting DNS traffic to hide malware

✅ Answer: A) By redirecting users to malicious websites without their knowledge
📝 Explanation: DNS hijacking manipulates domain resolution, redirecting users to phishing or malware-infected sites.

---

47. What is scareware?

🔘 A) Malware that encrypts files for ransom
🔘 B) Fake security alerts that trick users into downloading malware
🔘 C) Malware that deletes files after a countdown
🔘 D) A tool used by hackers to remove security software

✅ Answer: B) Fake security alerts that trick users into downloading malware
📝 Explanation: Scareware displays fake warnings (e.g., “Your PC is infected!”) to trick users into downloading malicious software.

---

48. What is a fake codec scam?

🔘 A) A method where attackers trick users into installing malware disguised as a video codec
🔘 B) A technique for bypassing antivirus detection
🔘 C) A browser exploit that modifies JavaScript execution
🔘 D) A way to inject malware into online streaming services

✅ Answer: A) A method where attackers trick users into installing malware disguised as a video codec
📝 Explanation: Fake codec scams prompt users to install a “required codec” to play a video, but the download contains malware.

---

49. How does spyware typically distribute itself?

🔘 A) Through trojanized applications and freeware downloads
🔘 B) Only via infected USB devices
🔘 C) By exploiting hardware vulnerabilities
🔘 D) By modifying operating system files

✅ Answer: A) Through trojanized applications and freeware downloads
📝 Explanation: Spyware is often hidden in freeware, trojanized apps, and phishing emails, secretly collecting user data.

---

50. How does malware hide inside legitimate email attachments?

🔘 A) By embedding malicious scripts in Word, Excel, or PDF files
🔘 B) By modifying the email’s metadata
🔘 C) By encrypting itself within ZIP archives
🔘 D) By exploiting email headers

✅ Answer: A) By embedding malicious scripts in Word, Excel, or PDF files
📝 Explanation: Malware often hides in document macros or PDF exploits, executing when the user opens the file.

---

51. What is Fast Flux, and how is it used in malware distribution?

🔘 A) A technique to rapidly change DNS records to hide malware servers
🔘 B) A type of high-speed ransomware attack
🔘 C) A botnet that spreads through email attachments
🔘 D) A method of injecting malware into fast-loading web pages

✅ Answer: A) A technique to rapidly change DNS records to hide malware servers
📝 Explanation: Fast Flux allows attackers to quickly rotate IP addresses, making it harder to take down malicious infrastructure.

---

52. How do cybercriminals use cryptocurrency mining malware (cryptojacking)?

🔘 A) By hijacking CPU or GPU resources to mine cryptocurrency
🔘 B) By stealing cryptocurrency from digital wallets
🔘 C) By encrypting cryptocurrency transactions
🔘 D) By disguising themselves as legitimate crypto trading platforms

✅ Answer: A) By hijacking CPU or GPU resources to mine cryptocurrency
📝 Explanation: Cryptojacking malware secretly uses a victim’s computing power to mine cryptocurrency for the attacker.

---

53. How do hackers use social media to spread malware?

🔘 A) By posting malicious links disguised as viral content
🔘 B) By hacking social media accounts to send malware-infected messages
🔘 C) By embedding malware in downloadable “cheat” files for games
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Hackers exploit social media by spreading malicious links, phishing scams, and infected downloads.

---

54. What is a rogue software update attack?

🔘 A) An attack where malware is disguised as a legitimate software update
🔘 B) A method of bypassing firewalls
🔘 C) A way to disable antivirus software
🔘 D) A vulnerability in cloud storage systems

✅ Answer: A) An attack where malware is disguised as a legitimate software update
📝 Explanation: Attackers fake software updates (e.g., “Update your browser”) to trick users into installing malware.

---

55. How do attackers use malicious shortened URLs for malware distribution?

🔘 A) By disguising malware links in shortened URLs (e.g., Bit.ly, TinyURL)
🔘 B) By injecting malware into URL shortening services
🔘 C) By exploiting social media preview features
🔘 D) By modifying DNS settings remotely

✅ Answer: A) By disguising malware links in shortened URLs (e.g., Bit.ly, TinyURL)
📝 Explanation: Shortened URLs hide malicious domains, leading victims to malware-infected sites.

---

56. What is an example of malware being spread through pirated software?

🔘 A) Keygen programs containing trojans
🔘 B) Open-source software hosting malware
🔘 C) Encrypted email attachments
🔘 D) DNS tunneling attacks

✅ Answer: A) Keygen programs containing trojans
📝 Explanation: Many pirated software “keygens” contain hidden malware, infecting users when executed.

---

57. How do attackers use malspam campaigns to distribute malware?

🔘 A) By sending mass phishing emails with malicious attachments
🔘 B) By hacking into email servers directly
🔘 C) By modifying antivirus signature databases
🔘 D) By injecting malware into cloud storage accounts

✅ Answer: A) By sending mass phishing emails with malicious attachments
📝 Explanation: Malspam campaigns use phishing emails to spread trojans, ransomware, and keyloggers.

---

58. How does mobile malware spread through SMS phishing (smishing)?

🔘 A) By sending fake text messages containing malicious links
🔘 B) By modifying SIM card encryption keys
🔘 C) By executing remote exploits via Bluetooth
🔘 D) By forcing users to install firewall software

✅ Answer: A) By sending fake text messages containing malicious links
📝 Explanation: Smishing tricks users into clicking malicious links in SMS messages, leading to malware infections.

---

59. What is the main way ransomware spreads in corporate networks?

🔘 A) Exploiting unpatched vulnerabilities and phishing attacks
🔘 B) Sending direct messages on social media
🔘 C) Infecting mobile devices first
🔘 D) Encrypting open-source software

✅ Answer: A) Exploiting unpatched vulnerabilities and phishing attacks
📝 Explanation: Ransomware often spreads via phishing emails and unpatched security flaws.

---

60. How does banking malware steal financial credentials?

🔘 A) By using keyloggers to capture typed credentials
🔘 B) By injecting malicious scripts into banking websites
🔘 C) By hijacking online banking sessions
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Banking malware steals credentials through keylogging, web injection, and session hijacking.

---

61. What is the primary way malware is delivered through cloud services?

🔘 A) Hosting malicious files on cloud storage platforms
🔘 B) Exploiting encryption algorithms
🔘 C) Modifying SSL certificates
🔘 D) Injecting malware into browser cookies

✅ Answer: A) Hosting malicious files on cloud storage platforms
📝 Explanation: Attackers upload malware to Google Drive, Dropbox, AWS, or other cloud platforms and share infected links.

---

62. How do attackers use rogue Android applications to distribute malware?

🔘 A) By embedding malicious payloads in fake apps
🔘 B) By modifying legitimate apps with additional malicious code
🔘 C) By publishing apps on third-party app stores instead of Google Play
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Cybercriminals create fake or modified Android apps and distribute them through third-party app stores.

---

63. What is a watering hole attack?

🔘 A) Compromising websites frequently visited by a target group
🔘 B) Sending phishing emails to employees of a company
🔘 C) Using malware to overload servers
🔘 D) Infecting mobile apps with spyware

✅ Answer: A) Compromising websites frequently visited by a target group
📝 Explanation: Attackers inject malware into trusted websites frequented by specific victims.

---

64. How do hackers use IoT devices to distribute malware?

🔘 A) By compromising vulnerable IoT devices to spread malware to other systems
🔘 B) By executing ransomware directly on IoT devices
🔘 C) By modifying the firmware of IoT devices to self-destruct
🔘 D) By using IoT devices to distribute spam emails

✅ Answer: A) By compromising vulnerable IoT devices to spread malware to other systems
📝 Explanation: IoT malware can infect routers, cameras, and smart devices, creating botnets for further malware distribution.

---

65. How does steganography help in malware delivery?

🔘 A) By hiding malicious code inside images, audio, or video files
🔘 B) By encrypting malware payloads
🔘 C) By using hidden folders to store malware
🔘 D) By embedding malware in PDFs

✅ Answer: A) By hiding malicious code inside images, audio, or video files
📝 Explanation: Steganography conceals malware payloads inside media files, bypassing antivirus detection.

---

66. How do attackers spread malware via file-sharing platforms?

🔘 A) By uploading infected executables disguised as software updates
🔘 B) By injecting malware into live streaming services
🔘 C) By modifying the metadata of shared files
🔘 D) By hacking into platform databases

✅ Answer: A) By uploading infected executables disguised as software updates
📝 Explanation: Malware is often distributed disguised as popular software, cracks, or keygens on file-sharing platforms.

---

67. How do cybercriminals use malvertising for malware distribution?

🔘 A) By placing malicious ads on legitimate websites
🔘 B) By hacking search engine ranking algorithms
🔘 C) By replacing website banners with phishing links
🔘 D) By encrypting ads to bypass ad-blockers

✅ Answer: A) By placing malicious ads on legitimate websites
📝 Explanation: Malicious ads can redirect users to exploit kits or force malware downloads.

---

68. What makes polymorphic malware hard to detect?

🔘 A) It constantly changes its code while keeping the same functionality
🔘 B) It can only execute inside virtual machines
🔘 C) It uses AI to target specific systems
🔘 D) It encrypts itself every time it runs

✅ Answer: A) It constantly changes its code while keeping the same functionality
📝 Explanation: Polymorphic malware modifies its signature, making it harder for traditional antivirus solutions to detect.

---

69. What is the role of exploit kits in malware delivery?

🔘 A) They identify and exploit software vulnerabilities automatically
🔘 B) They deliver patches to prevent malware
🔘 C) They generate unique encryption keys for malware
🔘 D) They are used only in ethical hacking

✅ Answer: A) They identify and exploit software vulnerabilities automatically
📝 Explanation: Exploit kits automate the process of finding and exploiting unpatched software vulnerabilities.

---

70. What is rogue security software?

🔘 A) Fake antivirus software that installs malware instead of removing it
🔘 B) A legitimate tool that scans for vulnerabilities
🔘 C) A penetration testing framework used by ethical hackers
🔘 D) A form of ransomware

✅ Answer: A) Fake antivirus software that installs malware instead of removing it
📝 Explanation: Rogue security software tricks users into downloading malware under the pretense of removing threats.

---

71. How do hackers use botnets for malware delivery?

🔘 A) By distributing malware to multiple systems simultaneously
🔘 B) By encrypting files before delivery
🔘 C) By launching direct SQL Injection attacks
🔘 D) By bypassing firewall security

✅ Answer: A) By distributing malware to multiple systems simultaneously
📝 Explanation: Botnets distribute malware at scale, infecting multiple systems for further exploitation.

---

72. What is a key characteristic of a rootkit?

🔘 A) It allows malware to remain undetected by modifying system files
🔘 B) It spreads only through removable media
🔘 C) It only affects mobile devices
🔘 D) It cannot persist after a system restart

✅ Answer: A) It allows malware to remain undetected by modifying system files
📝 Explanation: Rootkits hide malware by modifying system files and disabling security software.

---

73. How do hackers use phishing websites to distribute malware?

🔘 A) By mimicking legitimate sites to trick users into downloading infected files
🔘 B) By embedding malware directly into URLs
🔘 C) By modifying browser certificates
🔘 D) By creating fake search engine results

✅ Answer: A) By mimicking legitimate sites to trick users into downloading infected files
📝 Explanation: Phishing websites are designed to look like real sites and prompt users to download malware or enter credentials.

---

74. What is a key characteristic of fileless malware?

🔘 A) It operates in memory instead of writing files to disk
🔘 B) It hides inside ZIP archives
🔘 C) It infects only mobile devices
🔘 D) It is immune to security patches

✅ Answer: A) It operates in memory instead of writing files to disk
📝 Explanation: Fileless malware executes directly in RAM, making it difficult to detect and remove.

---

75. What is an example of malware propagation through removable media?

🔘 A) Auto-run malware on infected USB drives
🔘 B) Ransomware spreading through Bluetooth
🔘 C) Malware executing via online banking applications
🔘 D) Malware hidden in cloud storage links

✅ Answer: A) Auto-run malware on infected USB drives
📝 Explanation: Some malware exploits USB autorun features to automatically execute when plugged into a computer.

---

76. What is a distinguishing feature of ransomware?

🔘 A) It encrypts files and demands payment for decryption
🔘 B) It steals banking credentials
🔘 C) It spreads only through USB devices
🔘 D) It primarily affects IoT devices

✅ Answer: A) It encrypts files and demands payment for decryption
📝 Explanation: Ransomware locks access to files or systems and demands a ransom payment in cryptocurrency to restore access.

---

77. How do hackers spread malware through Discord and Telegram?

🔘 A) By sending malicious files disguised as legitimate content
🔘 B) By taking control of user accounts remotely
🔘 C) By modifying Discord’s core application
🔘 D) By intercepting messages using encryption flaws

✅ Answer: A) By sending malicious files disguised as legitimate content
📝 Explanation: Attackers upload malware-laced files to messaging platforms like Discord and Telegram and trick users into downloading them.

---

78. What is the primary function of a keylogger in malware attacks?

🔘 A) To secretly record keystrokes and steal sensitive information
🔘 B) To inject malicious code into search engine results
🔘 C) To encrypt files without user permission
🔘 D) To create fake accounts on social media

✅ Answer: A) To secretly record keystrokes and steal sensitive information
📝 Explanation: Keyloggers capture everything a user types, including passwords, credit card numbers, and personal messages.

---

79. How does a man-in-the-middle (MITM) attack help distribute malware?

🔘 A) By intercepting and modifying network traffic to inject malicious payloads
🔘 B) By forcing users to download fake PDF files
🔘 C) By encrypting all outgoing web traffic
🔘 D) By sending malware via Bluetooth beacons

✅ Answer: A) By intercepting and modifying network traffic to inject malicious payloads
📝 Explanation: In a MITM attack, hackers can modify HTTP or DNS traffic to redirect victims to malware-infected websites.

---

80. How do attackers use fake browser updates to deliver malware?

🔘 A) By displaying pop-ups that trick users into installing trojanized “update” files
🔘 B) By modifying browser settings remotely
🔘 C) By injecting malware directly into cookies
🔘 D) By forcing browsers into “safe mode” before launching attacks

✅ Answer: A) By displaying pop-ups that trick users into installing trojanized “update” files
📝 Explanation: Fake browser update messages prompt users to download malware disguised as a security update.

---

81. How do attackers use PDF exploits for malware delivery?

🔘 A) By embedding malicious JavaScript in PDF documents
🔘 B) By encrypting the PDF file with a ransomware payload
🔘 C) By modifying the metadata of PDFs
🔘 D) By using PDFs to initiate brute force attacks

✅ Answer: A) By embedding malicious JavaScript in PDF documents
📝 Explanation: Some malicious PDFs contain JavaScript exploits that execute malware when opened.

---

82. How does email spoofing help in malware distribution?

🔘 A) By making phishing emails appear as if they come from trusted sources
🔘 B) By modifying the recipient’s email settings
🔘 C) By blocking antivirus scans on attachments
🔘 D) By encrypting email attachments before delivery

✅ Answer: A) By making phishing emails appear as if they come from trusted sources
📝 Explanation: Email spoofing manipulates email headers to make phishing messages look like they’re from a legitimate sender.

---

83. What is an example of malware spreading via DNS tunneling?

🔘 A) Using DNS queries to send and receive malware commands
🔘 B) Encrypting DNS requests to bypass firewalls
🔘 C) Modifying browser DNS settings remotely
🔘 D) Injecting JavaScript into DNS requests

✅ Answer: A) Using DNS queries to send and receive malware commands
📝 Explanation: DNS tunneling allows attackers to bypass security controls and distribute malware via DNS traffic.

---

84. How does social engineering contribute to malware infections?

🔘 A) By tricking users into installing malware voluntarily
🔘 B) By modifying network security policies
🔘 C) By launching brute-force attacks on passwords
🔘 D) By altering encryption algorithms

✅ Answer: A) By tricking users into installing malware voluntarily
📝 Explanation: Attackers manipulate human behavior to convince users to download and execute malware.

---

85. What is the role of a botnet in distributing malware?

🔘 A) It acts as a network of infected devices to spread malware further
🔘 B) It encrypts all files before spreading them
🔘 C) It modifies firewall rules remotely
🔘 D) It is used only for cryptocurrency mining

✅ Answer: A) It acts as a network of infected devices to spread malware further
📝 Explanation: Botnets are used to distribute malware at scale, infecting thousands of devices simultaneously.

---

86. What is a common method of spreading malware through Bluetooth?

🔘 A) Exploiting vulnerabilities in Bluetooth pairing protocols
🔘 B) Encrypting Bluetooth signals with a malicious payload
🔘 C) Overloading Bluetooth frequencies to disrupt communication
🔘 D) Disguising malware as a Bluetooth audio file

✅ Answer: A) Exploiting vulnerabilities in Bluetooth pairing protocols
📝 Explanation: Attackers exploit weak Bluetooth security settings to install malware on nearby devices.

---

87. How do attackers use SMS phishing (smishing) for malware distribution?

🔘 A) By sending fake text messages containing malicious links
🔘 B) By modifying cellular network encryption
🔘 C) By executing direct SIM swap attacks
🔘 D) By embedding malware into voice calls

✅ Answer: A) By sending fake text messages containing malicious links
📝 Explanation: Smishing tricks users into clicking malicious links sent via SMS.

---

88. What is an example of malware hiding in cloud-based applications?

🔘 A) Malicious macros in shared cloud documents
🔘 B) Executable malware files disguised as PDFs
🔘 C) Infected ZIP files uploaded to cloud storage
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers use cloud platforms to distribute infected macros, PDFs, and ZIP files.

---

89. How do cybercriminals distribute malware through fake job postings?

🔘 A) By embedding malicious links in fake job applications
🔘 B) By requiring victims to download an “application form” that contains malware
🔘 C) By using phishing emails that appear to be from HR recruiters
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers use fake job postings to trick applicants into downloading malware.

---

90. How does malware exploit security misconfigurations in web applications?

🔘 A) By injecting malicious scripts via input fields
🔘 B) By bypassing authentication mechanisms
🔘 C) By exploiting default credentials on admin panels
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers exploit misconfigured security settings to inject malware, bypass authentication, and escalate privileges.

---

91. How do attackers use compromised WordPress sites to distribute malware?

🔘 A) By injecting malicious JavaScript into web pages
🔘 B) By adding backdoors to plugins and themes
🔘 C) By redirecting visitors to phishing sites
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Hackers compromise WordPress sites to inject malicious JavaScript, backdoors, and redirections, leading to malware infections.

---

92. What is the primary goal of malware hidden in browser extensions?

🔘 A) To steal browser cookies and session data
🔘 B) To bypass antivirus software
🔘 C) To disable JavaScript execution
🔘 D) To modify DNS records

✅ Answer: A) To steal browser cookies and session data
📝 Explanation: Malicious browser extensions can steal user data, track browsing activity, and hijack login sessions.

---

93. How do attackers use fake CAPTCHA pages to distribute malware?

🔘 A) By tricking users into enabling malicious browser notifications
🔘 B) By running malware scripts when users click “Verify”
🔘 C) By using hidden iframes to execute downloads
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake CAPTCHA pages use social engineering to make users click buttons that trigger malware downloads or unwanted browser permissions.

---

94. How can attackers distribute malware through compromised email accounts?

🔘 A) By sending phishing emails with malicious attachments
🔘 B) By embedding malware in email signatures
🔘 C) By inserting malicious links into forwarded conversations
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Compromised email accounts allow attackers to spread malware through phishing emails, email signatures, and infected attachments.

---

95. What is a characteristic of “silent” malware infections?

🔘 A) The malware runs in the background without user awareness
🔘 B) The malware encrypts files but doesn’t demand a ransom
🔘 C) The malware deletes itself after execution
🔘 D) The malware displays fake security alerts

✅ Answer: A) The malware runs in the background without user awareness
📝 Explanation: Silent malware infections operate stealthily, stealing data or controlling systems without detection.

---

96. How do attackers use fake invoice emails to spread malware?

🔘 A) By attaching infected Excel or PDF files
🔘 B) By embedding malicious links in email content
🔘 C) By impersonating legitimate companies
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake invoice emails often contain malicious attachments, phishing links, and impersonate real businesses.

---

97. What is the primary risk of downloading pirated video games?

🔘 A) The game might not work properly
🔘 B) The game may contain hidden trojans or ransomware
🔘 C) The download speed is usually slow
🔘 D) The file format may not be compatible with the system

✅ Answer: B) The game may contain hidden trojans or ransomware
📝 Explanation: Cracked and pirated games often include trojans, keyloggers, and ransomware, infecting systems when executed.

---

98. What is “USB Rubber Ducky” in malware attacks?

🔘 A) A malicious USB device that executes pre-programmed scripts
🔘 B) A virus that spreads through Bluetooth devices
🔘 C) A tool used to detect infected USB drives
🔘 D) A keylogger hidden inside a USB mouse

✅ Answer: A) A malicious USB device that executes pre-programmed scripts
📝 Explanation: The USB Rubber Ducky mimics a keyboard and executes automated attack scripts when plugged into a system.

---

99. How does “malicious PDF embedding” work?

🔘 A) By hiding JavaScript exploits inside PDF files
🔘 B) By modifying PDF metadata to redirect users to malware sites
🔘 C) By encrypting malware payloads inside PDFs
🔘 D) By creating fake error messages that trigger malware execution

✅ Answer: A) By hiding JavaScript exploits inside PDF files
📝 Explanation: Malicious PDFs contain embedded JavaScript exploits that execute malware when opened.

---

100. How do attackers distribute malware through online advertisements?

🔘 A) By injecting malicious code into ad networks
🔘 B) By displaying fake download buttons on websites
🔘 C) By redirecting users to exploit kits
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malvertising spreads malware by infecting ad networks, tricking users with fake buttons, and using redirects to exploit kits.

---

101. What is an example of a firmware-based malware attack?

🔘 A) BIOS rootkits that persist even after OS reinstallation
🔘 B) Browser hijackers that modify search results
🔘 C) Keyloggers hidden in software installers
🔘 D) Malware hidden in MS Word macros

✅ Answer: A) BIOS rootkits that persist even after OS reinstallation
📝 Explanation: Firmware-based malware infects BIOS/UEFI, making it difficult to detect and remove.

---

102. How does malware spread via QR code phishing?

🔘 A) By redirecting users to malicious websites when scanned
🔘 B) By executing malware through Bluetooth connections
🔘 C) By modifying NFC settings on mobile devices
🔘 D) By injecting JavaScript into mobile apps

✅ Answer: A) By redirecting users to malicious websites when scanned
📝 Explanation: QR phishing (Quishing) directs victims to malware-infected websites when scanned.

---

103. How do attackers use “rogue proxies” to distribute malware?

🔘 A) By hijacking network traffic and injecting malicious payloads
🔘 B) By forcing victims to download fake certificates
🔘 C) By creating VPN-like malware tunnels
🔘 D) By blocking security software updates

✅ Answer: A) By hijacking network traffic and injecting malicious payloads
📝 Explanation: Rogue proxies intercept network traffic and deliver malicious payloads to victims.

---

104. What is “payload obfuscation” in malware distribution?

🔘 A) Hiding the malware’s code to avoid detection
🔘 B) Encrypting malware to prevent execution
🔘 C) Disguising ransomware as legitimate files
🔘 D) Injecting malware directly into browser cache

✅ Answer: A) Hiding the malware’s code to avoid detection
📝 Explanation: Obfuscation alters malware signatures, making it harder for antivirus software to detect threats.

---

105. How do attackers use “clickbait” tactics to distribute malware?

🔘 A) By using misleading headlines to trick users into clicking infected links
🔘 B) By embedding malware inside HTML buttons
🔘 C) By injecting exploits into trending news pages
🔘 D) By modifying browser cookies to execute malware

✅ Answer: A) By using misleading headlines to trick users into clicking infected links
📝 Explanation: Clickbait malware tricks users into clicking malicious links by using sensational headlines.

---

106. How does malware spread through hacked smart home devices?

🔘 A) By exploiting weak passwords and unpatched firmware vulnerabilities
🔘 B) By sending phishing emails from smart TVs
🔘 C) By executing ransomware inside home security cameras
🔘 D) By modifying device encryption algorithms

✅ Answer: A) By exploiting weak passwords and unpatched firmware vulnerabilities
📝 Explanation: Attackers target poorly secured IoT devices (e.g., routers, security cameras, smart speakers) to install malware or create botnets.

---

107. How does “search engine poisoning” lead to malware infections?

🔘 A) By manipulating search engine rankings to push malicious websites
🔘 B) By injecting malware into search bar queries
🔘 C) By using hidden browser bookmarks
🔘 D) By modifying browser homepages remotely

✅ Answer: A) By manipulating search engine rankings to push malicious websites
📝 Explanation: Search engine poisoning ranks malware-hosting sites higher in search results, tricking users into clicking them.

---

108. How does “rogue mobile banking malware” operate?

🔘 A) By intercepting SMS-based two-factor authentication (2FA) codes
🔘 B) By forcing users to factory reset their devices
🔘 C) By modifying encrypted financial transactions
🔘 D) By disabling all banking apps on a device

✅ Answer: A) By intercepting SMS-based two-factor authentication (2FA) codes
📝 Explanation: Rogue banking malware steals 2FA codes to bypass security protections and hijack accounts.

---

109. How does “voice phishing (vishing)” assist in malware delivery?

🔘 A) By tricking victims into downloading malware over a phone call
🔘 B) By injecting malware into VoIP calls
🔘 C) By using speech-to-text malware delivery
🔘 D) By modifying call encryption algorithms

✅ Answer: A) By tricking victims into downloading malware over a phone call
📝 Explanation: Vishing (voice phishing) attackers impersonate tech support or banks, convincing victims to install malware.

---

110. How do attackers use “browser exploits” to spread malware?

🔘 A) By exploiting unpatched browser vulnerabilities to execute malicious code
🔘 B) By modifying search bar queries to inject payloads
🔘 C) By forcing users to install browser extensions
🔘 D) By redirecting users to social engineering websites

✅ Answer: A) By exploiting unpatched browser vulnerabilities to execute malicious code
📝 Explanation: Browser exploits target security flaws in browsers (e.g., Chrome, Firefox, Edge) to run malware automatically.

---

111. What is the role of WebSockets in malware distribution?

🔘 A) They enable real-time communication that can be hijacked for malware delivery
🔘 B) They allow attackers to send phishing emails in bulk
🔘 C) They provide a secure way to prevent malware infections
🔘 D) They are only used in banking applications

✅ Answer: A) They enable real-time communication that can be hijacked for malware delivery
📝 Explanation: WebSocket attacks can allow malware to bypass traditional security filters and deliver real-time payloads.

---

112. How do attackers use fake online surveys to distribute malware?

🔘 A) By tricking users into downloading “survey completion rewards” that contain malware
🔘 B) By modifying survey responses to inject malware
🔘 C) By using surveys to encrypt data remotely
🔘 D) By hijacking survey results to steal passwords

✅ Answer: A) By tricking users into downloading “survey completion rewards” that contain malware
📝 Explanation: Fake surveys promise free rewards, but users must download infected files to claim them.

---

113. How does “geo-targeted malware” work?

🔘 A) By detecting a user’s location and customizing attacks accordingly
🔘 B) By spreading malware through GPS signals
🔘 C) By infecting only government networks
🔘 D) By modifying Google Maps routes

✅ Answer: A) By detecting a user’s location and customizing attacks accordingly
📝 Explanation: Geo-targeted malware adjusts its behavior based on the victim’s location to evade security detection.

---

114. How do cybercriminals distribute malware via pirated eBooks?

🔘 A) By embedding malicious scripts inside PDF or EPUB files
🔘 B) By distributing books through AI-generated content
🔘 C) By modifying the text in eBooks
🔘 D) By hiding malware inside book covers

✅ Answer: A) By embedding malicious scripts inside PDF or EPUB files
📝 Explanation: Malicious eBooks contain hidden scripts that execute malware when opened.

---

115. How does “zero-click malware” infect a device?

🔘 A) By exploiting vulnerabilities without user interaction
🔘 B) By sending malicious push notifications
🔘 C) By requiring users to install software updates
🔘 D) By injecting malware into smartwatches

✅ Answer: A) By exploiting vulnerabilities without user interaction
📝 Explanation: Zero-click malware installs itself by exploiting system vulnerabilities, requiring no user action.

---

116. How do cybercriminals use AI-generated voices in malware distribution?

🔘 A) By impersonating real people in vishing scams
🔘 B) By encrypting voice messages with ransomware
🔘 C) By modifying VoIP signals for malware injection
🔘 D) By hijacking voice recognition systems

✅ Answer: A) By impersonating real people in vishing scams
📝 Explanation: AI voice generators create deepfake audio, tricking victims into downloading malware.

---

117. How does malware spread through video streaming platforms?

🔘 A) By embedding malicious links in video descriptions
🔘 B) By modifying video resolution settings
🔘 C) By forcing users to download plugins before watching
🔘 D) By altering the playback speed to trigger malware

✅ Answer: A) By embedding malicious links in video descriptions
📝 Explanation: Attackers use YouTube and other platforms to link users to infected downloads.

---

118. How do attackers use LinkedIn to distribute malware?

🔘 A) By sending fake job offers with infected attachments
🔘 B) By hijacking professional accounts for malware spreading
🔘 C) By embedding malware in direct messages
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers exploit LinkedIn to distribute malware via fake job offers, compromised accounts, and phishing links.

---

119. How does malware spread through QR code-based restaurant menus?

🔘 A) By redirecting users to malware-infected websites
🔘 B) By modifying restaurant Wi-Fi settings
🔘 C) By hijacking payment transactions
🔘 D) By encrypting QR code data

✅ Answer: A) By redirecting users to malware-infected websites
📝 Explanation: Malicious QR codes direct customers to infected phishing sites when scanned.

---

120. How does malware use AI-generated content to bypass detection?

🔘 A) By using machine learning to rewrite malware payloads
🔘 B) By generating fake online reviews with embedded malware
🔘 C) By modifying code signatures dynamically
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: AI-powered malware adapts by rewriting its code, faking legitimacy, and avoiding detection.

---

121. How do cybercriminals use deepfake videos to spread malware?

🔘 A) By embedding malicious links in video descriptions
🔘 B) By impersonating trusted individuals to trick victims into downloading malware
🔘 C) By encrypting malware payloads inside video files
🔘 D) By modifying social media video settings

✅ Answer: B) By impersonating trusted individuals to trick victims into downloading malware
📝 Explanation: Deepfake technology allows attackers to create fake video messages from executives or celebrities, convincing victims to download infected files.

---

122. How does “Wi-Fi honeypot malware” work?

🔘 A) By setting up fake Wi-Fi networks to intercept traffic and inject malware
🔘 B) By encrypting Wi-Fi connections to prevent malware detection
🔘 C) By hiding malware in Wi-Fi passwords
🔘 D) By modifying router firmware remotely

✅ Answer: A) By setting up fake Wi-Fi networks to intercept traffic and inject malware
📝 Explanation: Attackers create rogue Wi-Fi networks to steal login credentials and inject malware into HTTP traffic.

---

123. How do attackers use fake customer service chatbots to distribute malware?

🔘 A) By sending phishing links disguised as support responses
🔘 B) By hijacking customer support conversations
🔘 C) By forcing users to download “support software” that contains malware
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake customer support chatbots can phish users, hijack conversations, and push malware-laced downloads.

---

124. How does “HTML smuggling” deliver malware?

🔘 A) By embedding malicious JavaScript inside HTML files
🔘 B) By exploiting HTTP headers to force malware execution
🔘 C) By modifying website source code to inject malware
🔘 D) By using browser cookies to bypass security

✅ Answer: A) By embedding malicious JavaScript inside HTML files
📝 Explanation: HTML smuggling hides malware inside HTML or JavaScript, triggering execution when opened in a browser.

---

125. How do attackers use cryptocurrency giveaway scams to deliver malware?

🔘 A) By tricking users into downloading fake crypto wallets that contain malware
🔘 B) By embedding malware inside cryptocurrency transactions
🔘 C) By using blockchain technology to spread malware
🔘 D) By modifying crypto exchange rates

✅ Answer: A) By tricking users into downloading fake crypto wallets that contain malware
📝 Explanation: Fake crypto giveaways often ask victims to download “wallet software” that contains malware or backdoors.

---

126. How does malware spread through smartwatches and fitness trackers?

🔘 A) By exploiting Bluetooth vulnerabilities to spread malware to connected devices
🔘 B) By modifying step-count data to deliver malware
🔘 C) By hiding malware inside fitness tracking apps
🔘 D) By using GPS data to distribute malicious payloads

✅ Answer: A) By exploiting Bluetooth vulnerabilities to spread malware to connected devices
📝 Explanation: Malware can jump from smartwatches to smartphones by exploiting insecure Bluetooth connections.

---

127. What is the main way “fileless malware” spreads?

🔘 A) By exploiting in-memory execution without leaving files on disk
🔘 B) By modifying antivirus databases
🔘 C) By injecting malware into the recycle bin
🔘 D) By encrypting registry keys

✅ Answer: A) By exploiting in-memory execution without leaving files on disk
📝 Explanation: Fileless malware operates entirely in memory, making it harder to detect using traditional antivirus tools.

---

128. How does “living off the land” malware operate?

🔘 A) By abusing legitimate system tools (e.g., PowerShell) to execute malicious actions
🔘 B) By modifying environmental variables to hide payloads
🔘 C) By injecting malware inside system registry keys
🔘 D) By using cloud storage as an attack vector

✅ Answer: A) By abusing legitimate system tools (e.g., PowerShell) to execute malicious actions
📝 Explanation: Living off the land (LotL) attacks use built-in tools like PowerShell and WMI to execute malware without dropping files.

---

129. How do attackers use compromised GitHub repositories to distribute malware?

🔘 A) By uploading infected code disguised as open-source projects
🔘 B) By modifying README files to redirect users to malicious sites
🔘 C) By injecting malware into pull requests
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers upload trojanized repositories, modify documentation, and push malicious commits to spread malware.

---

130. What is “homoglyph phishing” in malware distribution?

🔘 A) Using visually similar domain names to trick users into downloading malware
🔘 B) Encrypting malware in Unicode characters
🔘 C) Injecting malware into font files
🔘 D) Using special symbols to bypass email filters

✅ Answer: A) Using visually similar domain names to trick users into downloading malware
📝 Explanation: Attackers register lookalike domain names (e.g., “g00gle.com”) to trick users into downloading malware.

---

131. How does “DLL sideloading” help malware evade detection?

🔘 A) By placing malicious DLL files where trusted programs load them
🔘 B) By encrypting DLL files before execution
🔘 C) By modifying system startup scripts
🔘 D) By injecting malware into web browsers

✅ Answer: A) By placing malicious DLL files where trusted programs load them
📝 Explanation: DLL sideloading tricks legitimate applications into loading and executing malicious DLL files.

---

132. How do hackers spread malware using free VPN services?

🔘 A) By injecting ads that lead to malware-infected sites
🔘 B) By modifying VPN traffic to distribute malicious payloads
🔘 C) By stealing user data and selling it on the dark web
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Some free VPNs inject malicious ads, steal data, and even deliver malware.

---

133. How do attackers use “clipboard hijacking” to steal cryptocurrency?

🔘 A) By replacing copied wallet addresses with attacker-controlled addresses
🔘 B) By modifying cryptocurrency exchange rates
🔘 C) By injecting JavaScript into trading platforms
🔘 D) By monitoring Wi-Fi networks for crypto transactions

✅ Answer: A) By replacing copied wallet addresses with attacker-controlled addresses
📝 Explanation: Clipboard hijackers detect crypto wallet addresses and swap them with attacker-controlled addresses.

---

134. How does malware spread through fake AI-powered tools?

🔘 A) By tricking users into installing AI-generated “enhancement” software
🔘 B) By modifying neural network algorithms
🔘 C) By injecting malware into AI-generated images
🔘 D) By using AI-powered chatbots to force downloads

✅ Answer: A) By tricking users into installing AI-generated “enhancement” software
📝 Explanation: Attackers disguise malware as AI-powered productivity tools, tricking users into downloading them.

---

135. How does malware use “invisible iframe injections” to infect users?

🔘 A) By embedding hidden iframes that load malicious content in the background
🔘 B) By displaying fake alerts that trick users into clicking them
🔘 C) By modifying the user’s firewall settings
🔘 D) By embedding malware inside web cookies

✅ Answer: A) By embedding hidden iframes that load malicious content in the background
📝 Explanation: Invisible iframes silently load malware-hosting websites, infecting users without any interaction.

---

136. What is the main goal of “ransomcloud” attacks?

🔘 A) To encrypt files stored in cloud services and demand ransom
🔘 B) To steal cloud-based API keys
🔘 C) To hijack cloud admin accounts for botnet operations
🔘 D) To disable two-factor authentication on cloud services

✅ Answer: A) To encrypt files stored in cloud services and demand ransom
📝 Explanation: Ransomcloud attacks encrypt files in OneDrive, Google Drive, and other cloud storage platforms, demanding ransom payments.

---

137. How does malware hide inside online code repositories?

🔘 A) By embedding malicious scripts in open-source projects
🔘 B) By modifying commit histories to inject malicious code
🔘 C) By distributing infected dependency packages
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers use infected repositories, poisoned dependencies, and modified commit logs to distribute malware through GitHub and open-source projects.

---

138. How do attackers use “fake resume emails” to spread malware?

🔘 A) By attaching infected Word documents with macro-based malware
🔘 B) By sending phishing links to fake job applications
🔘 C) By exploiting recruitment platforms to host malware
🔘 D) By injecting malware inside email headers

✅ Answer: A) By attaching infected Word documents with macro-based malware
📝 Explanation: Fake job resumes often contain malicious macros that execute malware when the document is opened.

---

139. What is the purpose of a “browser-in-the-browser” phishing attack?

🔘 A) To create fake login pop-ups that steal credentials
🔘 B) To execute ransomware through JavaScript
🔘 C) To hijack the browser’s update mechanism
🔘 D) To disable browser security plugins

✅ Answer: A) To create fake login pop-ups that steal credentials
📝 Explanation: Browser-in-the-browser (BitB) phishing tricks users into entering credentials into a fake login window inside a website.

---

140. How does malware spread via “malicious Chrome extensions”?

🔘 A) By injecting malicious scripts into web pages
🔘 B) By logging keystrokes from web forms
🔘 C) By redirecting searches to malicious websites
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious Chrome extensions can inject scripts, log keystrokes, and redirect searches to malware-infected pages.

---

141. How does “typosquatting” help attackers distribute malware?

🔘 A) By registering misspelled domain names of popular websites to trick users
🔘 B) By injecting typos into software code to trigger exploits
🔘 C) By modifying search results to promote malware-infected sites
🔘 D) By creating fake file names that look like legitimate ones

✅ Answer: A) By registering misspelled domain names of popular websites to trick users
📝 Explanation: Typosquatting involves registering similar-looking domains (e.g., “facbook.com”) to distribute malware.

---

142. How do attackers use “malicious website pop-ups” to spread malware?

🔘 A) By displaying fake security warnings that trick users into downloading malware
🔘 B) By using JavaScript to force auto-downloads
🔘 C) By embedding exploit kits inside pop-up windows
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious pop-ups display fake alerts, trigger auto-downloads, and inject exploits into browsers.

---

143. How do attackers spread malware using USB charging stations (Juice Jacking)?

🔘 A) By installing malware onto a device when it is plugged into a compromised charging station
🔘 B) By modifying USB ports to send malicious commands
🔘 C) By infecting only Apple devices through USB-C connections
🔘 D) By encrypting device storage through the charging port

✅ Answer: A) By installing malware onto a device when it is plugged into a compromised charging station
📝 Explanation: Juice jacking infects devices when they are plugged into compromised public USB charging stations.

---

144. How does “rogue AI chatbots” help in malware delivery?

🔘 A) By sending malicious links disguised as helpful responses
🔘 B) By exploiting AI-driven voice assistants to download malware
🔘 C) By using machine learning to spread malware faster
🔘 D) By encrypting chatbot messages with hidden payloads

✅ Answer: A) By sending malicious links disguised as helpful responses
📝 Explanation: Malicious AI chatbots provide infected links disguised as legitimate advice.

---

145. How do attackers use “malicious torrent files” to spread malware?

🔘 A) By embedding malware in pirated software and movies
🔘 B) By modifying torrent tracker metadata
🔘 C) By injecting exploits into video subtitles
🔘 D) By distributing fake seeders with malware payloads

✅ Answer: A) By embedding malware in pirated software and movies
📝 Explanation: Many torrent files contain infected keygens, trojans, or ransomware hidden inside pirated content.

---

146. What is the role of “rogue browser updates” in malware infections?

🔘 A) They trick users into downloading fake updates containing malware
🔘 B) They modify the browser’s security settings remotely
🔘 C) They inject malware into cache files
🔘 D) They automatically redirect users to exploit kits

✅ Answer: A) They trick users into downloading fake updates containing malware
📝 Explanation: Fake browser update alerts convince users to download malware disguised as security updates.

---

147. How do attackers use “malicious NFT airdrops” to distribute malware?

🔘 A) By sending NFT links that install wallet-stealing malware
🔘 B) By encrypting NFT metadata with ransomware
🔘 C) By using NFTs to trigger cryptocurrency mining scripts
🔘 D) By injecting malware into NFT blockchain transactions

✅ Answer: A) By sending NFT links that install wallet-stealing malware
📝 Explanation: Malicious NFT airdrops lure victims into downloading infected wallet apps.

---

148. What is “watering hole malware” in cyberattacks?

🔘 A) Malware that targets websites frequently visited by a specific group
🔘 B) Malware that spreads through watermarked images
🔘 C) Malware that modifies DNS records in public Wi-Fi
🔘 D) Malware that infects data stored in cloud backups

✅ Answer: A) Malware that targets websites frequently visited by a specific group
📝 Explanation: Watering hole attacks infect trusted websites, targeting specific organizations or industries.

---

149. How do attackers use “malicious mobile app permissions” to install malware?

🔘 A) By requesting excessive permissions to access sensitive data
🔘 B) By modifying app settings in the background
🔘 C) By changing security policies remotely
🔘 D) By forcing users to enable administrative rights

✅ Answer: A) By requesting excessive permissions to access sensitive data
📝 Explanation: Malicious apps request unnecessary permissions (e.g., SMS access, camera control) to steal data or install malware.

---

150. How does malware use “exploit chains” to gain access to a system?

🔘 A) By combining multiple vulnerabilities to bypass security defenses
🔘 B) By using brute force attacks to crack system passwords
🔘 C) By modifying file attributes to evade detection
🔘 D) By exploiting cloud services to inject malware

✅ Answer: A) By combining multiple vulnerabilities to bypass security defenses
📝 Explanation: Exploit chains involve using multiple linked vulnerabilities to escalate privileges and bypass security.

---

151. How do attackers distribute malware through software supply chain attacks?

🔘 A) By injecting malicious code into software updates or dependencies
🔘 B) By exploiting hardware vulnerabilities in supply chains
🔘 C) By distributing malware through counterfeit software packages
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Supply chain attacks inject malware into legitimate software updates, hardware, and dependencies.

---

152. What is the primary risk of downloading cracked or pirated software?

🔘 A) It often contains embedded malware such as trojans or keyloggers
🔘 B) It consumes more storage space than official software
🔘 C) It slows down internet speed significantly
🔘 D) It prevents access to official documentation

✅ Answer: A) It often contains embedded malware such as trojans or keyloggers
📝 Explanation: Cracked software is a common method of malware delivery, often containing ransomware, trojans, and spyware.

---

153. How does malware spread through online quizzes and personality tests?

🔘 A) By harvesting personal data to craft targeted phishing attacks
🔘 B) By embedding malicious JavaScript in quiz results pages
🔘 C) By forcing users to install browser extensions for quiz completion
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Online quizzes are used to collect personal data, deliver malicious scripts, and spread malware.

---

154. How do cybercriminals use “malicious macros” in Microsoft Office documents?

🔘 A) By embedding VBA scripts that execute malware when the document is opened
🔘 B) By modifying Office settings to disable security alerts
🔘 C) By forcing users to enable developer mode
🔘 D) By encrypting the document header to bypass detection

✅ Answer: A) By embedding VBA scripts that execute malware when the document is opened
📝 Explanation: Malicious macros in Word, Excel, and PowerPoint files execute malware when macros are enabled.

---

155. How does malware spread through malicious browser cookies?

🔘 A) By storing session hijacking scripts inside cookies
🔘 B) By modifying browser cache settings
🔘 C) By injecting payloads into HTTP headers
🔘 D) By encrypting cookie data with a malware key

✅ Answer: A) By storing session hijacking scripts inside cookies
📝 Explanation: Malicious cookies can contain session hijacking scripts that steal authentication tokens.

---

156. What is a key method of malware delivery using “fake browser plugins”?

🔘 A) By injecting malicious JavaScript into web pages
🔘 B) By redirecting users to phishing websites
🔘 C) By logging keystrokes and stealing credentials
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake browser extensions can steal credentials, inject scripts, and hijack browser sessions.

---

157. How does malware propagate through fake CAPTCHA verification pages?

🔘 A) By making users unknowingly approve malicious browser notifications
🔘 B) By logging keystrokes when users enter the CAPTCHA
🔘 C) By injecting malware into encrypted CAPTCHA responses
🔘 D) By redirecting users to harmless sites while malware runs in the background

✅ Answer: A) By making users unknowingly approve malicious browser notifications
📝 Explanation: Fake CAPTCHA pop-ups trick users into allowing malware-laced browser notifications.

---

158. How do attackers distribute malware via “fake refund scam emails”?

🔘 A) By tricking victims into opening malicious attachments
🔘 B) By embedding malware inside fake payment links
🔘 C) By redirecting users to credential-stealing pages
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake refund emails use attachments, links, and phishing pages to distribute malware.

---

159. How does malware spread via fake Adobe Flash Player updates?

🔘 A) By tricking users into downloading trojanized update files
🔘 B) By modifying legitimate Flash Player settings
🔘 C) By embedding exploits in official Flash files
🔘 D) By targeting browser compatibility settings

✅ Answer: A) By tricking users into downloading trojanized update files
📝 Explanation: Fake Flash Player updates are a common way to spread malware disguised as software updates.

---

160. How does malware use “voice assistant hijacking” to spread?

🔘 A) By injecting commands into voice-controlled devices
🔘 B) By modifying audio settings to force malware execution
🔘 C) By using ultrasonic sound waves to trigger malware scripts
🔘 D) By creating fake AI-generated voice commands

✅ Answer: C) By using ultrasonic sound waves to trigger malware scripts
📝 Explanation: Attackers exploit ultrasonic commands to control voice assistants remotely and trigger malware execution.

---

161. How does malware propagate through “malicious PDF watermarks”?

🔘 A) By embedding hidden scripts in the watermark layer of the document
🔘 B) By modifying PDF permissions to allow automatic execution
🔘 C) By encrypting hidden commands within metadata fields
🔘 D) By replacing text with malware-encoded characters

✅ Answer: A) By embedding hidden scripts in the watermark layer of the document
📝 Explanation: Malicious PDFs can contain exploitable scripts hidden within watermark layers.

---

162. How does malware spread using “rogue mobile security apps”?

🔘 A) By posing as antivirus apps that secretly install malware
🔘 B) By disabling built-in security features on smartphones
🔘 C) By modifying app permissions to gain full access
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake security apps often disable real security, modify permissions, and install malware.

---

163. How do cybercriminals use Google Forms for malware delivery?

🔘 A) By tricking users into entering sensitive data on fake forms
🔘 B) By embedding malicious scripts in form responses
🔘 C) By hiding malware links in the form submission confirmation page
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers embed malicious scripts, phishing links, and malware downloads inside Google Forms.

---

164. How do attackers use “malicious Windows shortcut files (.LNK)” to deliver malware?

🔘 A) By embedding commands that execute hidden payloads
🔘 B) By modifying Windows registry startup settings
🔘 C) By disguising as legitimate shortcuts to system tools
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious .LNK files execute hidden commands, modify registry settings, and disguise themselves as legitimate files.

---

165. What is “clickless malware” and how does it spread?

🔘 A) Malware that infects devices without requiring any user interaction
🔘 B) Malware that spreads by clicking links in phishing emails
🔘 C) Malware that modifies Windows event logs
🔘 D) Malware that requires admin privileges to install

✅ Answer: A) Malware that infects devices without requiring any user interaction
📝 Explanation: Clickless malware exploits vulnerabilities to infect systems without any clicks or downloads.

---

166. How do cybercriminals distribute malware using fake job application portals?

🔘 A) By embedding malware in downloadable “resume templates”
🔘 B) By redirecting users to phishing login pages
🔘 C) By forcing users to install a “job application plugin”
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake job portals trick users into downloading malware-infected templates, phishing login credentials, and installing malicious plugins.

---

167. How does malware spread through malicious PowerPoint presentations?

🔘 A) By executing embedded VBA macros upon opening
🔘 B) By hiding malicious payloads in slide transitions
🔘 C) By using PowerPoint Object Linking and Embedding (OLE) to execute scripts
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers use VBA macros, OLE objects, and transition triggers to execute malware inside PowerPoint presentations.

---

168. What is a common way attackers use “rogue QR codes” to distribute malware?

🔘 A) By linking users to malicious sites that auto-download malware
🔘 B) By encoding malware scripts directly inside the QR code
🔘 C) By modifying legitimate QR codes on advertisements
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious QR codes redirect users to infected sites, inject scripts, or replace real QR codes in public places.

---

169. How do attackers spread malware via “rogue online courses”?

🔘 A) By embedding malware in downloadable study materials
🔘 B) By sending phishing emails with fake enrollment links
🔘 C) By hosting fake learning portals that steal credentials
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake online courses distribute malware through infected PDFs, phishing links, and credential-stealing portals.

---

170. How do hackers use “fake speed test websites” to deliver malware?

🔘 A) By embedding malware scripts inside speed test results
🔘 B) By forcing users to download “speed booster” applications
🔘 C) By redirecting users to exploit kits
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake internet speed test websites inject malware scripts, force downloads, or exploit browser vulnerabilities.

---

171. What is a major risk of downloading “modded” (modified) mobile apps?

🔘 A) They often contain trojans or spyware
🔘 B) They run faster than original apps
🔘 C) They automatically uninstall after use
🔘 D) They only work on rooted devices

✅ Answer: A) They often contain trojans or spyware
📝 Explanation: Modded apps are unofficial versions of legitimate apps, often injected with spyware, adware, or trojans.

---

172. How do cybercriminals use “malicious AI-generated images” for malware delivery?

🔘 A) By embedding malware payloads inside the metadata of AI-generated images
🔘 B) By using AI to generate deepfake scam campaigns
🔘 C) By using steganography to hide malware in the image pixels
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers use AI-generated images with hidden payloads, deepfake scams, and steganography-based malware delivery.

---

173. How does “rogue MFA (Multi-Factor Authentication) apps” spread malware?

🔘 A) By mimicking real MFA apps but secretly stealing login credentials
🔘 B) By injecting malicious scripts into real authentication processes
🔘 C) By disabling real MFA settings on user accounts
🔘 D) By forcing biometric verification before malware execution

✅ Answer: A) By mimicking real MFA apps but secretly stealing login credentials
📝 Explanation: Fake MFA apps trick users into entering credentials, then send login information to attackers.

---

174. How does malware use “document templates” to infect victims?

🔘 A) By embedding malicious macros inside official-looking templates
🔘 B) By modifying metadata to trigger script execution
🔘 C) By automatically executing payloads when the template is opened
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malware-infected document templates contain hidden macros, metadata exploits, and auto-executing scripts.

---

175. How does malware propagate through “cloud storage syncing”?

🔘 A) By infecting one file that syncs across multiple devices
🔘 B) By hiding malware inside shared folders
🔘 C) By modifying cloud permissions to allow automatic execution
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Cloud malware spreads by syncing infected files, hiding in shared folders, and exploiting misconfigured permissions.

---

176. How do attackers distribute malware through fake “security alert emails”?

🔘 A) By tricking users into clicking phishing links
🔘 B) By embedding malware in fake “urgent update” attachments
🔘 C) By redirecting users to credential-stealing login pages
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers send fake security alerts with malicious links, infected attachments, and fake login pages.

---

177. How do cybercriminals spread malware through “fake resume-building websites”?

🔘 A) By forcing users to download “resume templates” that contain malware
🔘 B) By requiring users to enter credentials for “free downloads”
🔘 C) By injecting JavaScript exploits into the website itself
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake resume-building websites spread malware via infected downloads, credential theft, and site exploits.

---

178. How do cybercriminals spread malware through “fake online giveaways”?

🔘 A) By requiring victims to download “entry verification” files
🔘 B) By embedding malware in confirmation emails
🔘 C) By injecting malicious tracking cookies
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake giveaways are used to trick users into downloading malware or stealing personal data.

---

179. How do attackers distribute malware through “fake VPN services”?

🔘 A) By offering free VPNs that secretly log user data and install malware
🔘 B) By modifying network traffic to inject exploits
🔘 C) By encrypting malicious payloads inside VPN tunnels
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Many fake VPN services log user data, modify traffic, and deliver stealth malware infections.

---

180. How does malware spread using “fake Windows activation tools”?

🔘 A) By tricking users into downloading keygens that contain trojans
🔘 B) By modifying system registry keys to allow backdoor access
🔘 C) By installing hidden remote access trojans (RATs)
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake Windows activators often contain RATs, trojans, and registry modifications to maintain persistence.

---

181. How do cybercriminals use “rogue software cracks” to distribute malware?

🔘 A) By embedding trojans inside keygens and patchers
🔘 B) By modifying system files to allow persistent malware execution
🔘 C) By tricking users into disabling antivirus software before installation
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Many pirated software cracks contain trojans, keyloggers, or remote access malware, often requiring users to disable security software.

---

182. How do hackers use “malicious Spotify playlists” to spread malware?

🔘 A) By embedding malware-laced links in playlist descriptions
🔘 B) By forcing users to download a “high-quality audio codec”
🔘 C) By using fake Spotify accounts to send phishing messages
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers distribute malware through fake playlist descriptions, phishing links, and fraudulent “audio enhancement” downloads.

---

183. How does malware spread through “malicious Instagram ads”?

🔘 A) By redirecting users to malware-infected sites through fake promotions
🔘 B) By injecting spyware into influencer-sponsored content
🔘 C) By tricking users into downloading fake “exclusive content” files
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious Instagram ads promote fake giveaways, trojanized downloads, and phishing pages.

---

184. How do attackers use “voice cloning” to assist in malware distribution?

🔘 A) By impersonating trusted individuals to convince victims to install malware
🔘 B) By modifying VoIP signals to inject malicious commands
🔘 C) By embedding malware in voice message files
🔘 D) By using AI-generated voices to bypass biometric authentication

✅ Answer: A) By impersonating trusted individuals to convince victims to install malware
📝 Explanation: AI-powered voice cloning allows cybercriminals to impersonate trusted figures and trick victims into installing malware.

---

185. How do cybercriminals spread malware through “malicious discount coupon sites”?

🔘 A) By redirecting users to exploit kits after clicking fake discount links
🔘 B) By requiring users to install a browser extension for discounts
🔘 C) By embedding trojans in downloadable “coupon generator” tools
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers create fake discount sites and coupon tools that steal credentials, inject malware, or force unwanted installations.

---

186. How do hackers use “malicious LinkedIn job offers” to distribute malware?

🔘 A) By sending phishing links disguised as job application portals
🔘 B) By attaching infected PDFs or Word documents as job descriptions
🔘 C) By embedding malware in LinkedIn direct messages
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake LinkedIn job offers are used to spread phishing links, deliver malware via attachments, and steal credentials.

---

187. How do attackers distribute malware through “fake online tax filing services”?

🔘 A) By requiring users to download a “tax calculator” that contains malware
🔘 B) By stealing personal and financial information through fake tax websites
🔘 C) By embedding spyware in tax refund phishing emails
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake tax filing services trick users into downloading malware, submitting personal data, and executing spyware scripts.

---

188. How do attackers use “malicious mobile themes” to spread malware?

🔘 A) By embedding trojans in downloadable phone themes and icon packs
🔘 B) By modifying system settings to allow malware persistence
🔘 C) By using dynamic wallpaper engines to inject malicious scripts
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious mobile themes can install spyware, alter system settings, and execute trojanized scripts.

---

189. How does malware spread through “fake browser-based games”?

🔘 A) By tricking users into installing a “game launcher” that contains malware
🔘 B) By embedding malicious JavaScript inside the game’s source code
🔘 C) By using fake in-game rewards that require malicious app downloads
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake browser games are used to inject malware via game launchers, scripts, and trojanized app downloads.

---

190. How do cybercriminals use “fake online banking alerts” to distribute malware?

🔘 A) By sending phishing emails with malicious login links
🔘 B) By embedding trojans in fake “urgent security update” apps
🔘 C) By tricking users into downloading “banking verification tools”
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake banking alerts use phishing emails, trojanized updates, and malicious downloads to infect victims.

---

191. How do attackers spread malware using “pirated digital design software”?

🔘 A) By injecting trojans inside cracked versions of Photoshop and Illustrator
🔘 B) By embedding keyloggers in downloadable design templates
🔘 C) By tricking users into disabling antivirus software before installation
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Many pirated design software versions contain hidden trojans, keyloggers, and remote access malware.

---

192. How does malware spread through “malicious 3D printing files”?

🔘 A) By embedding malware payloads inside .STL and .OBJ files
🔘 B) By modifying G-code instructions to execute malicious scripts
🔘 C) By tricking users into downloading fake “3D model optimizers”
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious 3D files can execute scripts, modify printer behavior, and spread malware.

---

193. How do cybercriminals distribute malware through “fake AI chatbots”?

🔘 A) By embedding malicious links in chatbot-generated responses
🔘 B) By forcing users to install AI-powered browser extensions
🔘 C) By hijacking chatbot sessions to inject phishing messages
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious AI chatbots spread malware via infected links, trojanized browser extensions, and session hijacking.

---

194. How do attackers use “malicious Wi-Fi SSIDs” for malware distribution?

🔘 A) By tricking users into connecting to rogue Wi-Fi networks that inject malware
🔘 B) By embedding exploits into SSID names that execute on vulnerable devices
🔘 C) By using Wi-Fi packet sniffing to modify legitimate software downloads
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious Wi-Fi networks exploit SSID-based vulnerabilities, intercept downloads, and inject malware.

---

195. How does malware spread through “fake crowdfunding campaigns”?

🔘 A) By tricking donors into downloading trojanized receipt files
🔘 B) By embedding malware in campaign updates and emails
🔘 C) By using fake charities to collect sensitive financial data
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake crowdfunding scams distribute malware via infected receipts, phishing emails, and fraudulent donation pages.

---

196. How do attackers use “malicious browser push notifications” to distribute malware?

🔘 A) By tricking users into enabling notifications that lead to phishing or malware sites
🔘 B) By injecting malicious scripts into browser pop-ups
🔘 C) By modifying browser permissions remotely
🔘 D) By forcing users to install browser extensions

✅ Answer: A) By tricking users into enabling notifications that lead to phishing or malware sites
📝 Explanation: Fake browser notifications appear as system alerts and redirect users to malware-infected websites.

---

197. How does malware spread through “malicious cloud-based collaboration tools”?

🔘 A) By embedding malware in shared documents and spreadsheets
🔘 B) By exploiting misconfigured file-sharing permissions
🔘 C) By injecting malicious macros into cloud-synced files
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers target Google Drive, Dropbox, and Microsoft OneDrive by embedding malicious scripts, macros, and sharing exploits.

---

198. How do attackers use “malicious GitHub repositories” to spread malware?

🔘 A) By uploading infected code disguised as open-source projects
🔘 B) By injecting malicious scripts into dependencies
🔘 C) By modifying README files to contain phishing links
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious GitHub repositories contain infected open-source code, compromised dependencies, and misleading documentation.

---

199. How does malware spread through “fake voice messaging apps”?

🔘 A) By embedding spyware in the app that records private conversations
🔘 B) By requiring excessive app permissions to access SMS and contacts
🔘 C) By sending fake voice messages that contain malicious payloads
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious voice messaging apps steal user data, record conversations, and send fake voice messages with malware.

---

200. How do attackers distribute malware using “fake cryptocurrency wallets”?

🔘 A) By offering trojanized wallet apps that steal private keys
🔘 B) By redirecting transactions to attacker-controlled addresses
🔘 C) By embedding spyware that tracks user activity
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake crypto wallets steal wallet credentials, hijack transactions, and spy on user activity.

---

201. How does malware spread through “compromised browser bookmarks”?

🔘 A) By modifying stored bookmarks to redirect users to phishing sites
🔘 B) By injecting malicious scripts when bookmarked pages are opened
🔘 C) By using cloud-synced bookmarks to infect multiple devices
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malware can alter browser bookmarks to redirect users, inject scripts, and sync malicious links across devices.

---

202. How do attackers spread malware through “malicious MP3 or MP4 files”?

🔘 A) By embedding malware inside media file metadata
🔘 B) By exploiting vulnerabilities in media players to execute code
🔘 C) By hiding malicious payloads inside subtitle files
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Attackers embed malware in media files, exploit player vulnerabilities, and use infected subtitle files to execute code.

---

203. How do cybercriminals use “malicious LinkedIn learning courses” to distribute malware?

🔘 A) By embedding malware in course material downloads
🔘 B) By redirecting users to phishing login pages
🔘 C) By injecting scripts into fake educational platforms
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake LinkedIn learning courses trick users into downloading malware, entering credentials, or visiting infected sites.

---

204. How does malware spread through “fake mobile system updates”?

🔘 A) By tricking users into downloading malware disguised as an OS update
🔘 B) By modifying system files to allow persistent backdoors
🔘 C) By disabling security features before malware execution
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Fake system updates convince users to install trojanized firmware, disable security, and allow backdoor access.

---

205. How do attackers use “malicious Steam Workshop mods” to distribute malware?

🔘 A) By embedding malware inside game modification files
🔘 B) By tricking users into installing fake “enhanced graphics packs”
🔘 C) By injecting exploits into game scripts
🔘 D) All of the above

✅ Answer: D) All of the above
📝 Explanation: Malicious game mods distribute trojans, keyloggers, and remote execution exploits via Steam Workshop.