SECAI Core · phase 11 of 15 · noun
Trojan attack
A cyberattack that uses a malicious program disguised as legitimate software to trick users into installing it, after which it can create backdoors, steal data, download additional malware, or give attackers control of the compromised system.
The Explain card
- Plain English
- A trojan attack disguises a malicious program as legitimate software to trick users into installing it. Once inside, it can open backdoors, steal data, fetch more malware, or hand control to the attacker.
- Example
- A popular "free LLM desktop client" on a download site works as advertised but also exfiltrates every API key and conversation to a remote server.
- Why it matters
- AI tooling is young, fast-moving, and often installed from unofficial sources. Defenders vet software origins, verify signatures, and monitor outbound traffic from developer machines.
- Hook
- The gift horse with a hollow belly.
Word knowledge
How the word is built, where it came from, and what it sits beside in memory.
In a sentence
The security team identified a trojan attack after a signed software installer opened an unauthorized command-and-control connection.
Why these words
- trojan Latin Trojanus, of Troy invokes the Trojan horse as a model of concealed danger
- attack French attaquer, from Italian attaccare, to join battle names the hostile action or operation
Where it came from
- Origin
- an English compound based on the ancient Greek story of the Trojan horse
- Entered the language
- 20th century
- What changed
- Trojan shifted from a person or thing associated with Troy to a metaphor for concealed danger, then became a cybersecurity modifier
How it is spelled
- Pattern
- attack ends in -ck after the short a sound
- Pattern
- the phrase uses a modifying noun before attack
- Breaks the pattern
- Trojan is historically capitalized because it derives from Troy, but lowercase trojan is common in cybersecurity
Spelled like
- back
- stack
- phishing attack
- ransomware attack
Broken into chunks
-
trojan
- Trojan horse
- Trojan War
-
attack
- attacker
- counterattack
What it sits beside
Same subject
- malware
- backdoor
- command-and-control
- data poisoning
Same shape
- phishing attack
- backdoor attack
- ransomware attack
cyberattack terms
- trojan attack
- phishing attack
- supply-chain attack
security terms based on physical objects
- Trojan horse
- backdoor
- payload
Where it sits in the deck
Phase 11: Threat Landscape: Attack Vectors and Adversarial Techniques
With defences named, learn what they must defend against — the full catalogue of attack techniques targeting AI systems, their inputs, outputs, training pipelines, and supply chains.
