Which term refers to methods attackers use to deploy and hide malicious Trojans in an undetectable protocol?

Which term refers to methods attackers use to deploy and hide malicious Trojans in an undetectable protocol?

• A. Covert Channels
• B. Overt Channel
• C. Virus
• D. Exploit Kit

Answer: (A)

Covert channels describe techniques that let attackers hide communications or payloads inside legitimate-looking protocol traffic, enabling malicious Trojans to be deployed and controlled without detection. By using parts of a protocol in unintended ways—such as encoding commands within DNS queries, timing the sending of packets, or embedding data in rarely checked header fields—the attacker can blend malicious activity with normal network behavior. This makes the Trojan harder to spot with standard checks that only look at obvious signatures or obvious payloads. Understanding this helps explain why covert channels are the chosen method for stealthy Trojan deployment. In contrast, an overt channel is plain, visible traffic, which security tools would more easily flag. A virus refers to general malware that self-replicates, not specifically to hiding within a protocol’s operations. An exploit kit is a collection of exploits used to take advantage of vulnerabilities, not a mechanism for concealing a Trojan inside protocol traffic.

Covert channels describe techniques that let attackers hide communications or payloads inside legitimate-looking protocol traffic, enabling malicious Trojans to be deployed and controlled without detection. By using parts of a protocol in unintended ways—such as encoding commands within DNS queries, timing the sending of packets, or embedding data in rarely checked header fields—the attacker can blend malicious activity with normal network behavior. This makes the Trojan harder to spot with standard checks that only look at obvious signatures or obvious payloads.

Understanding this helps explain why covert channels are the chosen method for stealthy Trojan deployment. In contrast, an overt channel is plain, visible traffic, which security tools would more easily flag. A virus refers to general malware that self-replicates, not specifically to hiding within a protocol’s operations. An exploit kit is a collection of exploits used to take advantage of vulnerabilities, not a mechanism for concealing a Trojan inside protocol traffic.