Ethical Hacking Essentials Practice Test

What type of malware targets payment systems and compromises credit card data?

1. Point-of-sale trojans

2. Keyloggers

3. Spyware

4. Rootkits

The correct answer is: Point-of-sale trojans

Point-of-sale trojans specifically target payment systems and are designed to compromise credit card data during transactions. These types of malware are secretly introduced into point-of-sale terminals or systems, allowing attackers to capture card information as it is processed. The primary objective of these trojans is to collect sensitive data such as card numbers, expiry dates, and card verification values, which can then be used for fraudulent activities. In contrast, keyloggers capture keystrokes on a device, making them useful for stealing passwords and other sensitive information, but they are not specifically focused on payment systems. Spyware is designed to gather information about a user's activities without their knowledge and can encompass a broader scope than just payment data. Rootkits, on the other hand, are more about covering the malicious presence of an attacker on a system and do not inherently target credit card information. Thus, the specific targeting of payment systems is what differentiates point-of-sale trojans from other forms of malware.