Malware Glossary

Browse 35 malware terms defined in plain English, from the cultural dictionary of computing.

35 Malware Terms

Anti-Debug Technique
A method used by malware or protected software to detect, disrupt, or mislead debuggers so analysis becomes harder. Common anti-debug techniques include timing...
Anti-Emulation
Techniques used by malicious or protected software to detect or evade emulated execution environments commonly used in automated analysis sandboxes....
Anti-Virus
Software that detects, blocks, or removes malicious code on endpoints, traditionally through signature matching and increasingly through heuristic or...
Backdoor
Backdoor in cybersecurity is a covert method of bypassing normal authentication or security controls to gain unauthorized access to a computer system, network,...
Backdoor Detection
The process of identifying hidden unauthorized access mechanisms left in software, systems, or malware infections. Backdoor detection often requires behavioral...
Badware
A colloquial term for software that is malicious, deceptive, dangerously insecure, or simply harmful to users through abusive behavior. It is broader and less...
Beacon
A periodic network communication from malware or an implanted agent to its controller, often used to check in, receive commands, or signal that the foothold is...
Boot Sector Virus
Malware that infects the boot sector or master boot record so it executes before the operating system fully loads. Boot sector viruses were especially...
Botnet
Botnet is a network of compromised computers (called bots or zombies) that are remotely controlled by an attacker, known as a bot herder, typically through a...
Botnet Command and Control
Botnet Command and Control is the infrastructure and protocols used by an operator to manage compromised devices and distribute instructions. Security teams...
C2 Server
A server that receives check-ins from compromised hosts and sends them instructions, payloads, or updates as part of command-and-control infrastructure....
Cryptojacking
The unauthorized use of someone else's computing resources to mine cryptocurrency, often via malicious scripts on websites or compromised servers.
Custom Exploit
An exploit developed for a specific target, vulnerability, or campaign rather than taken directly from public kits or common tooling. Custom exploits are often...
Custom Payload
A malicious or security-testing payload tailored to a target environment or objective rather than reused unchanged from standard tooling. Custom payloads are...
DGA
Short for domain generation algorithm, a technique malware uses to generate many pseudo-random domain names so operators and infected hosts can rendezvous...
DLL Injection
A technique for forcing a process to load a DLL into its address space so attacker-controlled code runs inside that process. It is used by malware, red teams,...
Domain Generation Algorithm
Domain Generation Algorithm is a malware routine that creates many candidate domain names so operators can regain command channels dynamically. Security teams...
Exploit Kit
Exploit Kit is a packaged collection of exploits, delivery logic, and tracking used to compromise targets at scale. Security teams use it to enforce trust,...
Fileless Malware
Fileless Malware is malicious activity that relies heavily on memory, scripts, and legitimate tools instead of obvious dropped binaries. Security teams use it...
Implant
A malicious payload placed on or in a compromised system to provide persistence, remote access, surveillance, or later-stage attack capability. The term is...
IoT Botnet
A botnet made up of internet-connected devices such as cameras, routers, DVRs, or other embedded hardware that have been compromised and centrally controlled....
Keylogger
Software or hardware that covertly records every keystroke made on a computer, capturing passwords, messages, and other sensitive input for later retrieval by...
Key Logger
A tool or malware component that records keystrokes typed on a device in order to capture passwords, messages, or other sensitive input. Key loggers can...
Logic Bomb
Logic Bomb is malicious code that stays dormant until a specific trigger or condition causes it to execute. Security teams use it to enforce trust, reduce...
Macro Security
The controls, settings, and policy decisions used to prevent harmful document macros from executing or being abused for malware delivery. Macro security...
Malicious Payload
The harmful code or content delivered by an exploit, document, script, or malware stage to perform the attacker's intended action. A malicious payload may...
Malware
Malware is software intentionally designed to disrupt operations, steal data, establish persistence, or enable unauthorized access. Security teams use it to...
Malware Analysis
Malware Analysis is the examination of malicious software to understand behavior, capabilities, indicators, and defensive implications. Security teams use it...
Malware Sandbox
Malware Sandbox is a controlled execution environment used to observe malware behavior with reduced risk to production systems. Security teams use it to...
Memory Injection
A technique in which attacker-controlled code is written into the memory of a running process and then executed there, often to evade detection or inherit...
Payload
The component of malware or an exploit that performs the actual malicious action — data exfiltration, encryption, backdoor installation — as opposed to the...
Polymorphic Malware
Malware that changes parts of its code, encryption, or structure across generations while preserving its core behavior, making signature-based detection...
Ransomware
Ransomware is a type of malicious software that encrypts a victim's files, databases, or entire systems and demands a ransom payment (typically in...
Rootkit
Rootkit is a type of malicious software designed to gain and maintain privileged, persistent access to a computer system while actively concealing its presence...
YARA Rule
A pattern-matching rule used to identify malware, files, or memory artifacts by strings and conditions. It shows up in application security, identity,...

Related Topics