Shaheed Zulfikar Ali Bhutto Institute of Science & Technology
COMPUTER SCIENCE DEPARTMENT
Total Marks:
Obtained Marks:
Information Security
Assignment # 1
Section-A
Last date of Submission: 08th March, 2026
Submitted To:
Mr. Safi Ullah
Student Name: Muhammad Kumail Naqi Shah
Reg Number: 2280308
Information Security
BSSE – 6
SZABIST-ISB
03
Shaheed Zulfikar Ali Bhutto Institute of Science & Technology
COMPUTER SCIENCE DEPARTMENT
Instructions: Submission Guidelines:
1. Each question should be answered separately and clearly labelled.
2. Use appropriate citations and references if you consult external sources.
3. Ensure that your answers are well-structured and free from spelling and grammatical
errors.
4. Plagiarism will not be tolerated. Please make sure your answers are in your own words, and
any external sources are properly cited.
5. Copied or shown assignments will be marked zero.
6. Late submissions are not entertained in any case.
7. This assignment will be completed in groups of Two students
*******************************************************************************
Q.No.1: What is Malware?
Define malware and explain it in detail, including how it works and its impact on systems.
********************************ANSWER********************************
Malware is any software intentionally designed to disrupt, damage, gain unauthorized access to, or
exploit computer systems, networks, or devices without the knowledge or consent of the user.
How Malware Works
Malware typically follows a lifecycle:
1. Delivery The malware reaches the victim through email attachments, malicious links, infected USB
drives, compromised websites, or software downloads.
2. Execution Once on the system, it executes either automatically or triggered by a specific condition
3. Establishment / Persistence It embeds itself into the system by modifying registry keys, startup
programs, or system files so it survives reboots.
4. Payload Delivery The malware carries out its intended malicious action stealing data, encrypting files,
opening backdoors, displaying ads, etc.
Information Security
BSSE – 6
SZABIST-ISB
Shaheed Zulfikar Ali Bhutto Institute of Science & Technology
5. Command & Control Many advanced malwares connect to remote servers controlled by attackers,
receiving instructions and sending stolen data.
Impact on Systems
Area
Impact
Performance
Slows down CPU, RAM, and network usage
Data
Theft, corruption, deletion, or encryption of files
Privacy
Keylogging, screen capture, credential theft
Finances
Ransom demands, bank fraud, crypto mining
Infrastructure
Reputation
System crashes, network outages, hardware
damage
Data breaches damaging organizations publicly
*******************************************************************************************
Q.No.2: Types of Malwares with Examples
Identify and describe different types of malwares (e.g., viruses, worms, Trojans, ransomware,
etc.), providing example for each type.
*******************************ANSWER********************************
Types of Malware with Examples
1. Virus
A virus attaches itself to legitimate files or programs and spreads when those files are executed. It
requires human action to propagate.
How it works: Injects malicious code into host files; activates when the file runs
Effect: Corrupts/deletes files, slows system, spreads to other files
Information Security
BSSE – 6
SZABIST-ISB
Shaheed Zulfikar Ali Bhutto Institute of Science & Technology
Example: ILOVEYOU (2000) spread via email attachment, overwrote files and caused $10
billion in damage worldwide
2. Worm
A worm is self-replicating malware that spreads across networks without needing a host file or user
interaction.
How it works: Exploits network vulnerabilities to copy itself to other machines automatically
Effect: Consumes bandwidth, crashes networks, delivers additional payloads
Example: WannaCry (2017) exploited a Windows vulnerability (EternalBlue) and spread to
200,000+ computers in 150 countries
3. Trojan Horse
A Trojan disguises itself as legitimate software but carries a hidden malicious payload. Unlike viruses,
it does not self-replicate.
How it works: User is tricked into installing it; once inside, it opens backdoors or steals data
Effect: Unauthorized access, data theft, downloading other malware
Example: Zeus Trojan disguised as normal software, it silently captured banking credentials via
keylogging
4. Ransomware
Ransomware encrypts the victim's files and demands payment (usually cryptocurrency) to restore
access.
How it works: Infiltrates system → encrypts files → displays ransom note with payment
instructions
Information Security
BSSE – 6
SZABIST-ISB
Shaheed Zulfikar Ali Bhutto Institute of Science & Technology
Effect: Complete loss of data access, financial loss, operational shutdown
Example: REvil / Sodinokibi attacked businesses demanding millions in Bitcoin; one attack on
Kaseya affected 1,500+ companies
5. Spyware
Spyware secretly monitors user activity and sends the information to a third party without consent.
How it works: Runs silently in background, logging keystrokes, screenshots, browsing habits
Effect: Identity theft, credential compromise, privacy invasion
Example: Pegasus Spyware sophisticated tool that could access messages, camera, and
microphone on smartphones
6. Adware
Adware automatically displays or downloads unwanted advertisements, often bundled with free
software.
How it works: Embeds in browsers or applications; tracks browsing to serve targeted ads
Effect: Annoying pop-ups, browser hijacking, performance slowdown
Example: Fireball infected 250 million computers, hijacking browsers to generate ad revenue
7. Botnet / Bot
A bot turns an infected computer into a "zombie" controlled remotely as part of a larger network
(botnet) to perform coordinated attacks.
How it works: Malware infects machines → they connect to a C2 server → attacker sends
commands to all bots at once
Effect: DDoS attacks, spam campaigns, credential stuffing
Example: Mirai Botnet (2016)hijacked IoT devices and launched the largest DDoS attack in
history, taking down major websites
Information Security
BSSE – 6
SZABIST-ISB
Shaheed Zulfikar Ali Bhutto Institute of Science & Technology
8. Rootkit
A rootkit hides deep in the OS, granting attackers administrator-level (root) access while concealing its
own presence.
How it works: Modifies core OS functions to remain invisible to antivirus tools and users
Effect: Persistent unauthorized access, complete system control, hard to detect/remove
Example: Sony BMG Rootkit (2005) secretly installed on Windows PCs via music CDs to
prevent copying
9. Keylogger
A keylogger records every keystroke typed by the user and sends it to the attacker.
How it works: Hooks into keyboard input at OS level; logs everything typed silently
Effect: Passwords, credit card numbers, and sensitive messages stolen
Example: Olympic Vision a keylogger-based RAT used in Business Email Compromise (BEC)
attacks targeting businesses in 18 countries
10. Cryptojacker
Cryptojacking malware hijacks system resources to mine cryptocurrency for the attacker without the
user's knowledge.
How it works: Runs mining scripts via browser or installed malware; uses CPU/GPU resources
Effect: Severe system slowdown, overheating, increased electricity bills
Example: Coinhive embedded in websites and secretly used visitors' browsers to mine Monero
cryptocurrency
***********************************************************************************
Information Security
BSSE – 6
SZABIST-ISB
0
