A rootkit is a software, a malicious one to be specific. Rootkits are programs that help shady people access a device’s or computer’s system destined only for authorized users only. These programs are often bundled together.
因此，rootkit 授予對他們無權的網路或系統的某些部分的訪問許可權。Rootkit 特別危險，因為它們“綁架”了設備，並且讓運行它們的人接管了小工具或計算機。
With a rootkit, users can erase files, as well as obtain new ones or modify the already existing ones. They can also access system components and processes. This is why rootkits are widely considered dangerous software in the cybersecurity industry.
Hackers are very adept in using rootkits. The word “root” means a computer’s administrative privileges, which are the ones that hackers often target to take over a device or an entire system.
它們是惡意軟體嗎？
Whether rootkits are malware or not, is still up for debate. For example, there are law enforcement agencies that use them to fight crime, and even parents implement them to monitor their children’s computer activity closely. They have office applications as well.
可悲的是，rootkit 幾乎受到了所有的關注，因為它們參與了駭客醜聞並使用它來破壞系統。
In fact, most rootkits can be installed in a specific system via a Trojan horse or a computer virus. These trick the user into doing it without even knowing. However, the software, per se, should not be considered malware.
他們如何傳播？
他們如何傳播？Rootkits effectively work as spyware tools for hackers and cybercriminals. They can’t spread by themselves as regular worms do. The most obvious method they have to multiply is tricking the users into installing it themselves by the irresponsible management of cybersecurity.
Rootkit 也可用於創建殭屍網路。它們是重要的受感染檔組，通常用於未經授權挖掘加密貨幣、執行分散式拒絕服務 （DDoS） 攻擊和其他犯罪活動。
Hackers often try to scare users into installing malware in their systems, usually by showing “security alerts” saying that the device has been infected and that action is needed. This is found in sites and services of dubious nature.
在垃圾郵件甚至即時消息應用程式中發現的附件也可能導致使用者意外下載rootkit，使駭客和網路犯罪分子能夠在沒有任何高級管理員命令的情況下控制設備。
如何檢測 Rootkit？
借助高級軟體，您可以快速檢測設備中的病毒和間諜軟體。但是，仍然沒有明確的解決方案來檢測rootkit，至少不那麼容易。但是，有些事情可以做。
記憶體掃描可以在系統中搜索 rootkit，但其中只有少數是自動化的。即使是自動化的也無法以一般方式檢測 rootkit：它們旨在跟蹤特定的 rootkit。
要檢測 rootkit，您應該仔細查看電腦在特定時間段內的行為。任何可疑行為都可能意味著您的在線完整性和安全性已因該軟體的存在而受到損害。
業界的建議是，如果您是已安裝的rootkit的受害者，因為無法知道有多少檔被洩露，或者您是否設法刪除了每個檔，則執行系統重建。
如何保護自己免受 Rootkit 的侵害？
It is very tedious to remove the rootkit from a given device, so the best way is to stay protected while browsing the web. Doing it would mean reformatting the computer, and that may be inconvenient for some reasons, mainly time and the possible loss of data.
Using a VPN to protect yourself is a wise choice. Since VPNs (Virtual Private Networks) can encrypt your shared content and your online identity, hackers trying to install rootkits in your device will most likely fail.
If you want a reliable, trustworthy VPN brand, choose a paid one, such as IPBurger VPN. It is a perfect example of how robust encryption and responsible data management can help you fend off hackers trying to gain access to your administrative privileges via rootkit installation.
如何刪除它們？
由於 rootkit 可以幫助網路犯罪分子控制任何給定的設備，因此它們不容易刪除。人們可以使用可用於針對特定rootkit的防病毒和/或反惡意軟體，但它們不適用於它們中的每一個：有些非常複雜，特別難以根除。
在某些情況下，使用者需要執行複雜的記憶體轉儲分析來查找和刪除一些rootkit。這些軟體應用程式往往很好地隱藏在您的檔案或系統中。
此外，還有精確的反 Rootkit 軟體演示，旨在對抗和刪除特定的 Rootkit。
如何避免它們？
Browsing the web responsibly is the best way to avoid rootkits. Don’t click or download any attachments for unknown or untrustworthy sites, ignore or delete spam email, and generally think before you click when you sit down in front of a computer.
Also, you should use antivirus software with a proven track record of success. Anti-malware software can work, as well, as they can put firewalls that block unauthorized network connections.
如果您需要下載附件，則應在執行之前禁用Office中的宏以及Foxit Reader和Adobe Reader中的JavaScript操作。請記住使作業系統的驅動程式保持最新。
