What describes Hosted Malware?

• A. Malware hosted on websites that users click to download
• B. A malicious domain or compromised site hosting malware
• C. Malware embedded in image files
• D. Malware delivered via USB drives

Answer: (B)

Hosted malware means the attacker places the malicious payload on a remote host so it can be served to victims from that location. A malicious domain or a compromised site hosting the malware fits this idea perfectly because the site acts as the delivery point, storing the payload and distributing it to users who visit or interact with it. This setup enables techniques like drive-by downloads or exploit-driven redirects, where simply visiting the site can trigger the delivery of the malware.

Why the other ideas don’t fit as well: embedding malware in image files is a different tactic (steganography or payload concealment within media), and malware delivered via USB drives involves physical media rather than a remote hosting site. The description about malware hosted on websites that users click to download is close, but the defining feature of hosted malware is that the malicious code is hosted on a domain or compromised site acting as the hosting point for the payload.