MALWARE AND TYPES OF MALWARE
An in-depth study into malicious software architectures, historical milestones, threat vectors, warning signs, and prevention methodologies.
PRESENTED BY RESEARCH TEAM
Daisy Aleria
Security Analyst
Glydel Marice Mejares
Threat Researcher
Marvin Taghap
Tig Loto ug Kanton
Marjorie Cabardo
Malware Analyst
Nova Paipa
Systems Auditor
Jirlyn Anto
Defense Specialist
DEFINITION OF MALWARE
Malware (short for malicious software) is any intrusive software developed by cybercriminals or hackers to steal data, bypass security controls, gain unauthorized access, or cause damage to devices, networks, and computer systems.
It serves as an umbrella term for various types of harmful code!
Creeper (The First Worm)
Written by Bob Thomas at BBN Technologies as an experimental self-replicating program on ARPANET.
It was non-destructive; it simply moved between DEC PDP-10 mainframes displaying:
A program called Reaper was created shortly after to track down and delete Creeper, effectively becoming the world's first antivirus software.
DEC PDP-10 INFECTION
Self-replicating experiment paved the way for automated worms and security patches.
"It will get on all your disks
It will infiltrate your chips
Yes, it's Cloner!"
Elk Cloner (First Wild PC Virus)
Created by 15-year-old student Rich Skrenta as a prank for Apple II systems.
Spread via 5.25-inch floppy disks, it attached to the operating system code in memory.
Every 50th boot, it displayed a short poem on the monitor announcing its presence to the unsuspecting user.
Brain (First IBM PC Virus)
Developed in Pakistan by brothers Basit and Amjad Farooq Alvi to track and prevent illegal copies of their medical software.
Spread via floppy disks on MS-DOS, it replaced the boot sector of the disk and renamed the drive label to (c)Brain.
While it slowed down disk operations, it was not designed to destroy data, but marked the arrival of stealth virus techniques.
DRIVE LABEL: "(c)Brain"
First IBM PC virus designed as an early anti-piracy DRM protection measure.
UNIX Machines Crippled (~10% of global internet in 1988)
The Morris Worm (First Major Outbreak)
Created by Robert Tappan Morris, a graduate student at Cornell, intended to measure the size of the early Internet.
Due to a coding error, it continuously infected systems multiple times, crippling roughly 6,000 Unix machines (about 10% of the entire Internet at the time).
Led to the first conviction under the U.S. Computer Fraud and Abuse Act and inspired the creation of CERT/CC.
AIDS Trojan / PC Cyborg (First Ransomware)
Distributed via 20,000 physical floppy disks mailed to attendees of the WHO World AIDS Conference by Joseph Popp.
The software encrypted file names on MS-DOS systems after 90 reboots and demanded $189 sent to a P.O. Box in Panama to unlock the files.
This was the world's very first documented ransomware attack vector.
Demanded via Panama P.O. Box after 90 system reboots
Originating in the Philippines, spreading worldwide in hours
ILOVEYOU Worm (Mass Propagation)
Spread via an email attachment titled LOVE-LETTER-FOR-YOU.TXT.vbs.
Originating in the Philippines, it overwrote personal files and automatically forwarded itself to every contact in the victim's Microsoft Outlook address book.
Infected over 10% of internet-connected computers globally and caused an estimated $10 billion in damages.
MALWARE EVOLUTION ERA TIMELINE
Creeper
ARPANET experimental worm.
Elk Cloner
Apple II floppy disk virus.
Brain
First IBM PC boot sector virus.
Morris Worm
First major internet crash.
AIDS Trojan
First PC Cyborg ransomware.
ILOVEYOU
Mass global email worm.
Key Takeaway
Malware transformed from benign academic curiosity into complex criminal monetization schemes, leading directly to today's multi-billion dollar threat ecosystem.
CORE TYPES OF MALWARE & THREAT VECTORS
11 Primary Threat Categories
Attaches to executable files (.exe, .doc) and spreads when executed.
Exploits network vulnerabilities to automatically self-replicate across connected devices.
Masquerades as legitimate software to trick users into installing it.
Encrypts files or locks system access, holding data hostage for crypto ransom.
Secretly monitors online activity, harvest credentials, and log user data.
A subset of spyware that records every keystroke to capture passwords and details.
Aggressively displays unwanted ads, redirects searches, and tracks web habits.
Uses fake security alerts ("PC Infected!") to trick users into paying for rogue software.
Social engineering attack using spoofed emails/sites to lure targets into surrendering credentials.
Networks of infected "zombie" devices controlled remotely by a central botmaster.
Deeply embeds itself into the operating system kernel, hiding presence and other malware from antivirus tools.
COMMON EFFECTS & WARNING SIGNS OF MALWARE
Impact Categories
- Slowdowns & Freezes: High CPU/RAM usage (Adware, Worms, Cryptojackers).
- Crashes & Instability: BSODs and corrupted OS files (Rootkits, Viruses).
- Resource Hijacking: Device enrolled into zombie networks (Botnets).
- Data Theft: Exfiltration of credentials & personal files (Spyware, Trojans).
- File Encryption: Locked or destroyed files (Ransomware, Wipers).
- Extortion & Lockout: Ransom demands and complete operational shutdown.
- Fraudulent Transactions: Direct bank theft via keyloggers & session cookies.
Warning Signs Your Device May Be Infected
Unexplained Pop-ups
Persistent ads appearing even when offline.
Modified Settings
Homepage or browser engine altered without consent.
Disabled Security
Antivirus or firewall automatically switched off.
High Network Activity
Unexplained bandwidth spikes while idle.
ESSENTIAL MALWARE PREVENTION MEASURES
1. Keep Systems Updated
Enable automatic OS & application updates to patch vulnerabilities before exploits occur.
2. Reputable Antivirus
Maintain active real-time protection to monitor system behaviors and block malicious scripts.
3. Safe Email Habits
Never open untrusted attachments or click links from unexpected senders to foil phishing.
4. Official Sources Only
Download applications exclusively from verified app stores or official developer sites.
5. Enable MFA
Multi-Factor Authentication stops stolen passwords from resulting in unauthorized access.
6. USB Media Safety
Avoid inserting unknown external storage devices that might execute autorun malware payload.
7. 3-2-1 Data Backups
Keep 3 copies of data on 2 different media types with 1 offsite/cloud copy to survive ransomware.
8. Secure Web Browsing
Utilize ad-blockers and modern web browsers with malvertising protection filters enabled.
REFERENCES & THREAT INTELLIGENCE
Oliver Buxton, 15 types of malware: real-world examples and protection tips
December 20, 2024 (15 min read) • Norton Threat Labs
Kurt Baker, The 12 Most Common Types of Malware
February 27, 2023 • CrowdStrike Falcon Research
Jon Clay, Types of Malware
December 08, 2025 • Trend Micro Global Threat Information
Click 'Next' below or press right arrow to finish presentation!