Malware

Malware (Malicious Software)

Schadsoftware

Malware is the umbrella term for any software written to cause harm — to steal or encrypt data, disrupt systems or give attackers control. It encompasses many families such as viruses, worms, trojans, ransomware and spyware. It is the connecting tool behind most technical attacks.

History & facts. The categories overlap and constantly evolve: viruses attach to other programs, worms spread themselves, trojans disguise themselves as useful, ransomware extorts, spyware spies. Modern malware is frequently modular, downloads functions on demand and actively tries to evade detection and analysis — for instance through obfuscation or purely memory-resident behaviour. Research sources such as Malpedia — Malware Encyclopedia (Malpedia) order and name the families, tools such as YARA — Pattern Matching for Malware (YARA) recognise them by patterns.

Outlook & recommendation. Purely signature-based detection falls short against new or obfuscated variants; complementary behaviour-based detection at the endpoint and in the network is necessary. Defence in depth remains decisive: hindered initial access, least privilege, segmentation and good backups limit the damage if something does get through. A central, correlated view of endpoint, network and log data is the basis for detecting malware early and in context.

Malware — Malware (Malicious Software)