Usually, malware infects a computer when the user initiates a download from a malicious website and installs the malware. When a user is deceived into clicking on a link and starts the installation of the software, the malware downloads and infects the computer. But, many attackers use a concept called the drive-by download to spread malware. Let’s try to understand what the drive-by download is.

What is the drive-by download?

The drive-by download is a technique using which malware can start downloading on a computer automatically when a user visits a malicious website that spreads the malware. When a user visits a malicious website, the download starts automatically in the background. Mostly, this type of download exploits some security vulnerabilities in the browser or other commonly used software.

How does the drive-by download work?

The drive-by download uses a tiny piece of initial code. The code often instructs the infected computer to download the rest of the malware. Usually, the malicious website contains several malware programs that exploit different security flaws. When a user visits the website, at least one of the malware gets downloaded by taking advantage of the security vulnerabilities present in the victim’s computer.

Attackers usually send links to these malicious websites through email or text messages and even through attractive social media posts. The attackers sometimes post interesting articles or cartoons on social media. And when a user enjoys the article, the drive-by download starts in the background.

How to prevent drive-by downloads?

Do not click on suspicious-looking links. If you are not very sure about the authenticity of a website, it is better not to visit it. And be careful about clicking on interesting-looking but suspicious social media posts. They may do more harm than any benefit.

And it is always advisable to update the software you are using with security patches. Attackers often take advantage of security flaws present in software to spread malware.

Preferably, use a safe search tool that will keep you updated about possible malicious websites. And use trusted anti-virus software.

This article gave a brief overview of the drive-by download. Interested readers who want to find more information about various malware and cyberattacks may want to refer to the book “A Guide To Cyber Security.”

Security Fundamentals Practice Tests

The Security Fundamentals Practice Tests test one’s fundamental knowledge of cyber security. The practice tests are good for those who are preparing for various certification exams like the CCNA, CCNP, or CompTIA. They are also good for students and IT/security professionals who want to improve their understanding of cybersecurity.