S02E27

What Is a Drive-By Download?

A drive-by download occurs when visiting a malicious or compromised website causes unwanted software, scripts, or other content to be delivered to a device. Certification exams may describe a user who becomes infected after browsing to a page without intentionally downloading a traditional program. The attack may exploit an outdated browser or extension, abuse malicious advertising, or use deceptive prompts that persuade the user to approve installation. Defenses include browser patching, extension management, web filtering, script restrictions, endpoint protection, application control, and user awareness. During troubleshooting or incident response, analysts should examine browsing history, downloaded files, browser processes, extension changes, security alerts, and network connections to determine whether the site exploited software automatically or relied on user interaction. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with. And dont forget Cyberauthor.me for the companion study guide and flash cards!