Ransomware and Malware — Prelims Strategy

Prelims Strategy

For Prelims, focus on factual recall and conceptual clarity regarding ransomware and malware. Vyyuha recommends a multi-pronged approach. Firstly, master the definitions: clearly differentiate between ransomware, general malware, and Advanced Persistent Threats (APTs).

Understand key terms like RaaS, zero-day exploit, phishing, and network segmentation. Secondly, memorize the relevant sections of the IT Act 2000 (e.g., 43, 66, 70B) and the roles of key institutions like CERT-In, NCIIPC, and Cyber Swachhta Kendra.

Thirdly, be aware of major global and Indian ransomware incidents (WannaCry, NotPetya, AIIMS) and their key takeaways. Fourthly, understand common attack vectors (phishing, RDP, supply chain) and effective prevention strategies (backups, MFA, patching).

Finally, integrate current affairs by regularly tracking CERT-In advisories and major cyber security news. Questions often test definitions, legal provisions, institutional roles, and practical prevention measures.

Practice MCQs with detailed explanations to identify common traps and strengthen conceptual understanding.