Who is Making All This Malware – and Why?

The Evolution of Malware and its Underlying Motivations

The landscape of malicious software has dramatically shifted from the era of compromised floppy disks exchanged between DOS-based systems. Modern malware is rarely created for frivolous purposes like pranks or simple destruction.

Instead, the driving force behind the proliferation of malware is overwhelmingly financial gain. Understanding this core principle is key to grasping the reasons for its existence and continued development.

The Profit-Driven Nature of Cybercrime

The creation and distribution of malware, along with other forms of harmful software, are fundamentally motivated by the pursuit of profit by criminal entities. These individuals and groups seek to monetize their malicious activities.

It’s crucial to recognize that the development of malicious software isn’t about causing chaos; it’s a business model for cybercriminals.

• Criminals develop malware to generate revenue.
• The primary goal is financial exploitation.
• Understanding this motive is essential for cybersecurity awareness.

Related: Not All "Viruses" Are Viruses: 10 Malware Terms Explained

The focus has shifted from simply disrupting systems to exploiting vulnerabilities for financial benefit. This includes activities like data theft, ransomware attacks, and fraudulent schemes.

Early Malware

Those who utilized computers during the 1990s likely recall the initial widespread computer viruses. These were frequently created as pranks or demonstrations of technical skill, intended to disrupt computer functionality and inflict harm by individuals with ample free time.

Infection with malware often manifested as a pop-up message asserting that your system had been compromised, or a noticeable decline in performance as a worm attempted to propagate itself across the internet.

More aggressive malware could even attempt to erase all data from your hard drive, rendering your computer unusable without a complete Windows reinstallation.

Initial Virus Characteristics

The Happy99 worm, recognized as the first virus to disseminate through email, served solely to replicate itself. It functioned by sending copies to other computers.

This process resulted in errors on the infected system and displayed a "Happy New Year 1999 !!" message accompanied by a fireworks animation. Notably, the worm’s functionality was limited to self-propagation.

Keyloggers and Trojans

The primary driving force behind malware development today is financial gain. Modern malware is not designed to simply announce its presence, hinder system operation, or cause damage. The objective isn't to disrupt your software or necessitate a Windows reinstallation.

Such actions would only inconvenience the user and diminish the number of compromised machines available to the malware author.

Keyloggers and Trojans represent common methods employed by malicious actors. Instead of overt disruption, malware aims for stealthy infiltration and prolonged, undetected operation.

A keylogger, for instance, silently monitors your keystrokes, capturing sensitive information like credit card details and online banking credentials as you input them. This intercepted data is then transmitted back to the malware's originator.

Interestingly, the creator of the malware may not directly exploit this stolen information. They frequently opt to sell it at a reduced price on illicit online marketplaces to individuals willing to assume the risk of fraudulent activity.

Alternatively, malware can operate as a Trojan, establishing a connection to a remote server and awaiting commands. Upon receiving instructions, the Trojan downloads additional malicious software specified by the attacker.

This capability allows malware authors to maintain control over infected systems, repurpose them for various malicious activities, and deploy updated malware versions.