Today’s 220-1202 CompTIA A+ Pop Quiz: Not sure what this one does

A company has discovered a technician performing scans and installing unauthorized software to vulnerable systems. Which of the following would describe this attack type?