The DarkHotel group targets high-profile individuals, like corporate executives, while they are traveling. The attackers compromise a hotel's Wi-Fi and use it to trick the target into downloading malware, often disguised as a software update for a popular application.

A supply chain attack involves compromising a trusted vendor or process to distribute malware. By infecting a legitimate software update, attackers can gain access to all the users who trust and install that update.

A "zero-day" vulnerability is a security flaw that has just been discovered by attackers, meaning the software developers have had "zero days" to create a patch. Attacks that exploit these vulnerabilities are highly effective because there is no defense against them yet.

In the context of malware, the payload is the component that executes the intended malicious activity, such as deleting files, encrypting data, or opening a backdoor. The rest of the malware code is often dedicated to spreading and concealment.

In the SolarWinds attack, hackers compromised the software build process of the SolarWinds Orion platform. They inserted the Sunburst malware into legitimate software updates, which were then distributed to thousands of SolarWinds customers, creating a backdoor into their networks.

An IDS is like a burglar alarm for a network. It doesn't necessarily stop an attack in progress (that's the job of an Intrusion Prevention System, or IPS), but it is designed to detect suspicious patterns and alert administrators to a potential threat.

Exposing RDP directly to the internet is extremely risky and a common vector for ransomware attacks. If remote access is needed, it should be secured behind a VPN and protected with strong passwords and multi-factor authentication.

Marcus Hutchins, also known as "MalwareTech," accidentally discovered a kill switch in WannaCry's code. The malware was programmed to check if a specific, unregistered domain name was active. Hutchins registered the domain, which caused many instances of the worm to stop spreading.

A dropper is a kind of Trojan that has been designed to "drop" or install other malicious files onto a victim's machine. The dropper itself may not be malicious, but it is the carrier for a harmful payload.

Magecart is not a single group but rather an umbrella term for a collection of cybercriminal groups who specialize in "formjacking." They compromise online shopping websites and inject malicious code to skim customer payment card details during the checkout process.