Which term refers to a type of fileless malware that exploits NodeJS, a program that executes JavaScript outside the browser?

Which term refers to a type of fileless malware that exploits NodeJS, a program that executes JavaScript outside the browser?

• A. Divergent
• B. Antivirus sensor system
• C. Malware analysis
• D. Sheep dipping

Answer: (A)

Fileless malware stays in memory and uses legitimate programs to run, avoiding writing traditional files to disk. When JavaScript needs to run outside a browser, NodeJS provides a runtime that executes that code on the host. If there’s a label for malware that fits this in-memory, NodeJS-exploiting behavior, it’s described as Divergent. This naming reflects the tactic of operating without typical on-disk payloads and instead leveraging a trusted runtime to carry out actions, which is the hallmark of fileless threats. The other terms here refer to defensive tools, analysis processes, or concepts not describing a malware family or its technique, so they don’t fit the scenario.

Fileless malware stays in memory and uses legitimate programs to run, avoiding writing traditional files to disk. When JavaScript needs to run outside a browser, NodeJS provides a runtime that executes that code on the host. If there’s a label for malware that fits this in-memory, NodeJS-exploiting behavior, it’s described as Divergent. This naming reflects the tactic of operating without typical on-disk payloads and instead leveraging a trusted runtime to carry out actions, which is the hallmark of fileless threats. The other terms here refer to defensive tools, analysis processes, or concepts not describing a malware family or its technique, so they don’t fit the scenario.