Mobile & Web Malware
Part III — Mobile & Web Malware
Section titled “Part III — Mobile & Web Malware”The malware types in this section target mobile platforms (Android, iOS) and web infrastructure, reflecting the shift of computing to mobile and cloud.
Risk: 🟠 High | Self-Replicates: ⚠️ Some variants
Mobile malware targets smartphones and tablets (Android, iOS) for data theft, financial fraud, surveillance, and botnet recruitment.
Notable: Cabir (2004), DroidDream (2011), Pegasus (2016+), Joker (2019+), FluBot (2020-22), Anubis (2017+), Cerberus (2019+), EventBot (2020), SpyNote (2022+)
Risk: 🟠 High | Self-Replicates: ❌ No
A web shell is a malicious script uploaded to a web server that provides the attacker with remote command execution via a web browser.
Notable: c99 (2000s), r57 (2000s), China Chopper (22 bytes), WSO (2000s+), ProxyLogon shells (2021)
Risk: 🟠 High | Self-Replicates: ❌ No
Phishing is a social engineering technique where attackers impersonate trusted entities to trick victims into revealing credentials, installing malware, or transferring funds.
Types: Email, Spear Phishing, Whaling, Smishing (SMS), Vishing (Voice), Quishing (QR), Clone Phishing, BEC
Risk: 🔴 Critical | Self-Replicates: ❌ No
Business Email Compromise is pure social engineering — attackers impersonate executives, vendors, or partners to trick employees into transferring funds. No malware required.
Types: CEO Fraud, Vendor Invoice Fraud, Payroll Diversion, Attorney Impersonation, Data Theft
Risk: 🟠 High | Self-Replicates: ❌ No
Banking trojans are specialised malware designed to steal financial credentials and conduct fraudulent transactions using overlay attacks, form grabbing, webinjects, and SMS interception.
Notable: Zeus/Zbot (2007), SpyEye (2009), Citadel (2011), Gameover Zeus (2011), Dridex (2014), TrickBot (2016), Emotet (2014+), IcedID (2017), Qakbot (2007+)
Risk: 🟠 High | Self-Replicates: ❌ No
A form grabber hooks browser APIs to capture form data (credentials, credit cards, PII) before TLS encryption, bypassing HTTPS protection.
Notable: Zeus/Zbot (2007), SpyEye (2009), Citadel (2011), Tinba (2012), Dridex (2014), TrickBot (2016)