What is malware?

With malware, hackers can do great damage to your computer and gain access to personal information that can be deleted or misused.

22-03-2022 - 10 minute read. Posted in: malware.

What is malware?

What is malware?

Malware, also known as malicious software, is one of the most common and dangerous cybersecurity threats. Cybercriminals use it to steal personal data, access health records and passwords, delete files, or even take control of entire systems.

Definition and history of malware

Malware is short for malicious software. It refers to any type of software that is designed to harm, exploit, or gain unauthorized access to a device, network, or user data.

There are many forms of malware, and each type of malware – such as viruses, worms, trojans, spyware, adware, ransomware, and rootkits – functions differently but shares the same goal of causing harm or disruption. Malware can slow down your device, steal confidential information, encrypt files for ransom, or allow remote access by attackers.

If software is created with harmful intent, it is considered malware.

A brief history of malware

The first malware appeared in the 1970s and was relatively harmless. These early programs were often created as experiments or pranks. The term 'computer virus' emerged to describe these self-replicating programs, marking a significant milestone in the history of malicious software. During the 1980s, more advanced threats such as worms and trojans emerged. Notably, the Elk Cloner computer virus infected apple ii systems by spreading through infected floppy disks, illustrating how early infectious code propagated between machines.

In the 1990s, as internet use increased, spyware and adware became widespread. Macro viruses also became common, as attackers exploited the macro language of Microsoft Word to write infectious code that spread through documents. Worms spread rapidly across networks during this era, taking advantage of vulnerabilities to infect large numbers of systems.

In the 2000s, malware became more aggressive and financially motivated. Instant messaging platforms like yahoo messenger were targeted by malware and worms using social engineering and malicious links. Ransomware gained attention with attacks like WannaCry and NotPetya, which caused global disruptions and financial losses.

Today, malware is more sophisticated than ever. Malware authors continue to write infectious code, and infectious code remains central to the spread of modern threats. It targets individuals, businesses, and critical infrastructure, making strong cybersecurity measures essential.

Characteristics of malware

Malware, or malicious software, is defined by its ability to infiltrate, disrupt, and damage computer systems, networks, and mobile devices. What sets malware apart from other software is its intent: it is specifically designed to exploit vulnerabilities in operating systems, legitimate software, or even human behavior for harmful purposes.

One of the most notable characteristics of malware is its stealth. Many types of malware operate in the background, often without the user’s knowledge, making it difficult to detect malware before significant damage is done. Malware can be delivered through infected files, malicious websites, phishing attacks, or bundled with unwanted software downloads. Once inside a computer system, malware can quickly spread to other devices, taking advantage of network connections and exploiting vulnerabilities in both software and hardware.

Malware is also highly adaptable. Malware authors constantly develop advanced malware that can evade traditional security software and antivirus software, using techniques like encryption, obfuscation, and fileless attacks. Some of the most dangerous malware types, such as trojan horses, ransomware, and computer viruses, are designed to gain remote access to an infected computer, steal sensitive data, or lock users out of their own files for financial gain.

Another key characteristic is the ability of malware to disguise itself as legitimate software or hide within seemingly harmless programs. Trojan horses, for example, appear to be useful applications but secretly install malicious code once executed. Ransomware attacks can encrypt sensitive data and demand payment for its release, while computer viruses attach themselves to other programs and spread through infected files or removable media.

Mobile devices are not immune to these threats. Mobile malware, especially on Android devices, is a growing concern as more people use their phones for sensitive tasks. Malware authors often target mobile devices through malicious apps, phishing attacks, and social engineering, aiming to steal data or gain unauthorized access to the device’s operations.

To combat malware, it’s essential to use robust security software, keep operating systems and other software updated, and practice safe online habits. Employing a password manager and using strong passwords can help prevent malware access through phishing attacks or brute-force attempts. Regularly scanning for malicious programs and avoiding suspicious downloads or links are also crucial steps to prevent malware infections.

In summary, malware is a constantly evolving threat that can compromise computer systems, networks, and mobile devices. By understanding how malware spreads, adapts, and evades detection, users can take proactive measures to protect their digital lives. Staying informed, using up-to-date antivirus software, and following best practices for network security are key to reducing the risk of malware attacks and keeping your devices safe.

Why malware is a serious threat

Malware is a collective term for various types of malicious software that can infect computers and perform harmful actions. It threatens your data, your privacy, and your overall digital safety.

Malware can be used to:

  • Steal sensitive information and login credentials

  • Monitor online activity through spyware

  • Delete or corrupt files

  • Lock files and demand payment through ransomware

  • Show unwanted advertisements and unwanted ads with adware

  • Launch distributed denial-of-service (DDoS) attacks

Protecting your devices requires a combination of technical tools and user awareness.

How malware infects devices

Cybercriminals use various malware delivery techniques to transmit malicious software to devices, often bypassing security measures. There are several common ways malware spreads:

Phishing

Phishing is one of the most common methods of spreading malware. Cybercriminals send deceptive emails or messages that trick users into clicking on malicious links or downloading a malicious email attachment. These messages often appear to come from trusted contacts or organizations.

Infected software

Downloading software from untrusted sources increases the risk of malware infection. Malware can be hidden in malicious files that appear to be legitimate, making it difficult to detect. To stay safe, always download software only from official or reputable websites.

Compromised websites

Visiting a compromised website can automatically trigger malware downloads. These sites often take advantage of outdated browsers or browser plugins.

Infected USB drives

Connecting an infected USB drive to your computer can introduce malware. Always use USB drives from trusted sources.

Vulnerabilities in software

Malware can exploit unpatched security flaws in legitimate software such as Windows, Java, or Adobe products to gain access to the target system. Keeping software up to date helps prevent these attacks.

Social engineering

Cybercriminals use manipulation to trick users into installing malware. This can include fake tech support calls, misleading pop-ups, or fraudulent messages on social media platforms. These fraudulent messages can also be delivered via social media messages.

Signs of a malware infection

Malware can be difficult to detect, especially if it operates in the background. Here are some signs that may indicate your device is infected:

  • Sudden and severe slowdown of your system

  • Webcam activating without your permission

  • Unfamiliar pop-up windows, which may include pop-up ads

  • Problems accessing the internet

  • Browser redirecting you to strange websites

  • New programs appearing that you did not install

If you notice any of these signs, run a full scan with trusted antivirus software immediately.

Common types of malware

Trojans

Trojans, also known as trojan viruses, disguise themselves as legitimate files or applications. Once installed, these trojan viruses can gain access to sensitive data by opening a backdoor to your system, allowing hackers to steal data or take control of your device. Discover how Trojans operate and how to identify them early in our detailed Trojan guide.

Worms

Worms replicate themselves and spread through networks without needing to attach to a host file. They can cause widespread damage by infecting many devices at once.

Viruses

Viruses attach themselves to existing programs and activate when the host program is run. Although they are now less common than other types of malware, they can still be harmful.

Spyware

Spyware secretly monitors your activity and can interfere with your device's operations. It can collect sensitive data such as passwords, browser history, and email contents. Learn more about how spyware works, how it’s used, and how to protect yourself in our guide to spyware.

Ransomware

Ransomware locks your data and demands payment to restore access. These attacks often use encryption to make the data unreadable until the ransom is paid. Ransomware is one of the most damaging types of malware today. For a deeper understanding of how ransomware spreads and how you can defend against it, take a look at our comprehensive ransomware overview.

Adware

Adware displays unwanted advertisements and may track your browsing habits. It can slow down your system and lead to more dangerous infections.

Mobile malware

Mobile malware can infect any type of mobile device, including smartphones and tablets. Smartphones are frequent targets, especially Android devices. Mobile malware can steal text messages, contact lists, banking information, and location data.

How to protect yourself from malware

Use antivirus software

Antivirus software scans your system for threats and removes malware. Keep it updated to ensure it can detect the latest threats. Regularly scan your device and all relevant applications.

Back up your data

Frequent backups protect you in case of a malware attack. Use both physical storage devices and cloud services. Make sure your backup system is not always connected or automatically synced, as malware can target backup files as well. Backups allow you to restore your data after wiping an infected device.

Keep software updated

Always update your operating system and applications. Many malware infections exploit known security vulnerabilities, so installing updates helps close these security gaps.

Use a firewall

A firewall controls the traffic entering and leaving your computer. It monitors and filters network traffic to block malware delivery, helping prevent unauthorized access and stopping some types of malware from spreading or downloading further payloads.

Avoid clicking on pop-ups

Do not click on pop-up warnings that claim your device is infected or suggest downloading unknown software. These messages are often fake and contain malware.

Be careful with emails and messages

Do not open email attachments or click on links from unknown senders. Spam emails are often used to distribute malware, so be especially cautious with unexpected messages, even if they appear to come from someone you know. Cybercriminals also use social media and chat platforms to distribute malware.

What to do if you are infected

If you suspect your computer is an infected system, take immediate action to identify and isolate it:

  1. Disconnect from the internet to prevent further damage or data leaks.

  2. Run a full scan with antivirus software to begin the process of removing malware. Ensure you remove malware completely to prevent reinfection.

  3. Clear temporary files, cookies, and browser cache.

  4. Change all your passwords after removing the infection.

  5. Contact cybersecurity professionals if you cannot remove the malware on your own.

Some types of malware, such as rootkits, are particularly difficult to remove and may require advanced tools or expert help.

Conclusion

Malware poses a serious threat to your devices, your data, your privacy, and can exploit your device's computing power for malicious activities. Understanding how it spreads, what it does, and how to protect yourself is essential in today’s digital environment.

By staying alert, using trusted security tools, and practicing safe online behavior, you can reduce your risk and keep your systems secure.

This post has been updated on 16-06-2025 by Sarah Krarup.

Author Sarah Krarup

Sarah Krarup

Sarah studies innovation and entrepreneurship with a deep interest in IT and how cybersecurity impacts businesses and individuals. She has extensive experience in copywriting and is dedicated to making cybersecurity information accessible and engaging for everyone.

View all posts by Sarah Krarup