Controlling the target through a rootkit

- [Instructor] Malware using the basic … hiding and cloaking techniques, … can be detected by a knowledgeable investigator. … Consequently, the more sophisticated attackers … have developed techniques, which in strong malware, … not just as an application or process, … look deep into the heart of the operating system. … This kind of malware is known as a rootkit. … In order to deploy a rootkit, … an attacker must first penetrate a target's system … and then use what is known as a dropper … to install the rootkit, which it either carries as a payload … or subsequently downloads. … The job of the dropper is to check whether the rootkit … already exists on the system, … whether the system is operating inside a virtual machine, … and to do special checks … such as the country in which its operating. … Then, once it's satisfied that this … is a legitimate and available target, … it inserts the rootkit into the system, … makes sure it can restart after a system boot, … and starts it running. …