SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-rootkit-stealth

Malware that hides its own presence by modifying operating system functions is called what?

Rootkit, a stealthy collection of files that alters standard functionality.

Start playing free

  1. A keylogger
  2. A rootkit ✔
  3. Adware

Why: Rootkits intercept and change operating system calls to hide files, processes and connections. That makes them very hard to find and remove.

Huh, didn't know that: MITRE ATT&CK describes rootkits as programs that hide the existence of malware by intercepting or hooking OS API calls.

The dad joke
The rootkit won hide and seek. It even hid from the scoreboard.
Like this card?
Play the game

References

Answer: A rootkit. Rootkits intercept and change operating system calls to hide files, processes and connections. That makes them very hard to find and remove.

  1. NIST SP 800-83 Rev. 1, Guide to Malware Incident Prevention and Handling nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-83r1.pdf
    A rootkit is a collection of files that is installed on a host to alter its standard functionality in a malicious and stealthy way.
    Checked 2026-10-10.
  2. MITRE ATT&CK T1014, Rootkit attack.mitre.org/techniques/T1014
    Adversaries may use rootkits to hide the presence of programs, files, network connections, services, drivers, and other system components.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhich malware spreads by inserting copies of itself into host programs or data files?Security & PrivacyWhich malware is self-contained and spreads across a network on its own, without user action?Security & PrivacyWhich malware looks like a useful program but has a hidden malicious purpose and does not replicate?

That's stuff everyone should know.