Which malware rewrites the boot record with malicious code, which, when executed, gains access and installs the malicious payload?

Which malware rewrites the boot record with malicious code, which, when executed, gains access and installs the malicious payload?

• A. CPU-based malware
• B. Disk-based malware
• C. USB-based malware
• D. Macro-based malware

Answer: (B)

Manipulating the startup sequence by rewriting the boot record is a disk-focused attack. By changing the boot sector or the Master Boot Record on the storage device, the malware ensures its code runs before the operating system loads, giving it control to gain access and install the payload. This pattern is characteristic of disk-based malware, since the infection resides on the disk’s boot region and leverages the boot process itself. It’s not about code running only inside the CPU after startup, nor about payloads delivered through USB storage or macros in documents. So the correct category is disk-based malware.

Manipulating the startup sequence by rewriting the boot record is a disk-focused attack. By changing the boot sector or the Master Boot Record on the storage device, the malware ensures its code runs before the operating system loads, giving it control to gain access and install the payload. This pattern is characteristic of disk-based malware, since the infection resides on the disk’s boot region and leverages the boot process itself. It’s not about code running only inside the CPU after startup, nor about payloads delivered through USB storage or macros in documents. So the correct category is disk-based malware.