📖 What is Trojan Horse?
A Trojan Horse is a type of malware that disguises itself as legitimate software to trick users into installing it. Unlike viruses, Trojans do not self-replicate but often create 'backdoors' for attackers to remotely control the system or steal data.
"The defining characteristic of a Trojan is the 'deception'—it must look like something useful to trick the user into executing it."
📚 Certification: CompTIA A+ Certification Exam Core 2 (220-1102)
🔑 What are the Key Concepts of Trojan Horse?
- ▸ Social Engineering reliance: Trojans depend on tricking users into executing a file, often masquerading as a useful utility, game mod, or software update.
- ▸ Lack of self-replication: Unlike viruses or worms, Trojans cannot spread automatically across a network; they require a user to manually install them.
- ▸ Backdoor creation: Many Trojans install Remote Access Trojans (RATs), which allow attackers to bypass authentication and control the system remotely without the user's knowledge.
- ▸ Payload delivery: Trojans often serve as 'droppers,' meaning their primary purpose is to install additional malicious software, such as ransomware or spyware, onto the host.
- ▸ Deceptive presentation: The malware is wrapped in a legitimate-looking shell, making it difficult for untrained users to distinguish it from trusted software.
🎯 How does Trojan Horse appear on the 220-1102 Exam?
A scenario might describe a user downloading a 'free system optimizer' that later allows an external attacker to steal files. You will be asked to identify this as a Trojan Horse.
You may be asked to differentiate between a worm and a Trojan. Look for keywords like 'manually executed' or 'disguised as' to identify the Trojan over the self-propagating worm.
Expect questions where a user is tricked into running a fake software update that opens a backdoor. You must recognize that the deception element defines this as a Trojan.
❓ Frequently Asked Questions
How do I distinguish a Trojan from a Virus on the A+ exam?
Focus on how they spread. A virus attaches to a host file and replicates to other files. A Trojan does not replicate; it relies entirely on social engineering to trick the user into running it.
What is a RAT, and how does it relate to Trojans?
A Remote Access Trojan (RAT) is a specific type of Trojan. While the 'Trojan' part is the deceptive delivery method, the 'RAT' is the payload that gives the attacker remote control.