Backdoor refers to any method where authorized and unauthorized users are able to get around normal security measures and gain high-level user access on a computer system, software application, or the entire network.
Backdoor malware will utilize vulnerabilities e.g. within web application. Backdoors can typically be very hard to detect as files are often obfuscated, and well hidden in the system.
Backdoors can be used to:
- steal data
- hijack servers
- deface websites
- launch distributed denial of service (DDoS) attacks
- carry out Advanced Persistent Threat (APT) threats
- infect website visitors (watering hole attacks)