Skip to content

Glossary · Cybersecurity fundamentals

Malware

Software written to harm, spy on or take control of a device or network.

What is malware?

Malware is any software written to harm, spy on or take control of a device, network or account. It includes viruses, worms, trojans, spyware, infostealers and ransomware.

How it works

Malware arrives through phishing attachments and links, malicious downloads, compromised websites, infected USB drives and unpatched software. Infostealers, which harvest saved passwords and session cookies, have become a leading source of stolen credentials.

Defenses include endpoint detection and response, application control, patching and email and web filtering.

Why it matters

Most malware still needs a person to open, run or allow something. Controls and habits together keep it out.

See which people and AI agentsare driving your risk.

A live walkthrough with our team, on the tools you already run.

  • 68%Less time in a risky state after targeted action (2026 Human Risk Report)
  • LeaderNamed Leader in the Forrester Wave™: Human Risk Management Solutions, Q3 2024
Book a demo