Sarah, a system administrator, was alerted of potential malicious activity on the network of her company. She discovered a malicious program spread through the instant messenger application used by he

The scenario focuses on an attacker using a compromised account to send files, rather than exploiting an unpatched vulnerability in the application itself as the primary attack vector. While patching is important, it doesn't directly address the social engineering aspect of receiving files from a seemingly legitimate contact.

The attack vector is explicitly stated as a malicious program spread through an instant messenger application by an attacker who obtained access to a teammate's account and sent files. Verifying the sender's identity through an out-of-band method before opening any files is a crucial user-level security practice to prevent the execution of malicious payloads from compromised trusted sources.

Rogue/Decoy applications are malicious programs disguised as legitimate software to trick users into installation; this scenario involves an attacker compromising and using a legitimate instant messenger application, not distributing a fake one.

The attack explicitly states the use of an instant messenger application for spreading malware, making portable hardware media and Autorun functionality entirely irrelevant to the described infection vector.