CyberGlossary

Malware

Malware

Also known as: Malicious software, Malicious code

Definition

Any software intentionally designed to disrupt, damage, or gain unauthorized access to computers, networks, or data.

Malware (malicious software) is an umbrella term for code whose behavior is harmful to the system it runs on or to its users. It includes viruses, worms, trojans, ransomware, spyware, rootkits, and many other families, often combined in modern campaigns. Malware is delivered through phishing, malicious websites, supply-chain compromise, removable media, or exploitation of unpatched vulnerabilities. Once executed, it may steal data, encrypt files for ransom, give remote control to an attacker, or pivot deeper into a network. Defences combine endpoint detection and response (EDR), patching, application allow-listing, network segmentation, user training, and routine offline backups.

Examples

  • WannaCry ransomware worm that spread via SMB in 2017.
  • Emotet banking-trojan-turned-loader used to deliver other malware families.

Related terms