1)Why would a threat actor choose to infect a computer driver?

2) Why is signature-based detection largely ineffective against polymorphic and metamorphic malware?

3) What cyber attack cycle is illustrated in the below timeline:

DISCOVERY ATTACK PATCH CREATED ): EXPLOIT VENDORS FINDING OUT PATCH DISTRIBUTED