Skip to content

Infection Propagation

Ivan Kirillov edited this page Feb 21, 2014 · 11 revisions
Aliases
Description The 'infection/propagation' Capability indicates that the malware instance is able to propagate through the infection of a machine or is able to infect a file after executing on a system. The malware instance may infect actively (e.g., gain access to a machine directly) or passively (e.g., send malicious email). This Capability does not encompass any aspects of the initial infection that is done independently of the malware instance itself.
Relationships
Properties
  • Scope: (The scope of the infection or propagation performed by the malware instance; i.e. whether it infects just the local machine or actively propagates to other machines as well).
References
Examples
Clone this wiki locally