Knowledge / malware acsc-glossary

Trojan

Hostile software dressed as something you meant to run. The gift is the rest of the program.

RANSOMWARE IMPACT PATH (defensive view)AccessPrivilegeSpreadImpactBreak the path early: identity, EDR, backups you have actually restored.

A Trojan pretends to be legitimate software so you will run it. Once inside it can steal, persist, or fetch more hostile code. Some variants download extra files; others carry them in the bundle.

Do not run unsigned 'invoice' macros, cracks, or helpers from a chat. Application control and a browser that will not execute random downloads beat a lecture after the fact.

Fact source: ASD's ACSC glossary.