What is a malware attack?
Definition
A malware attack is when an attacker gets malicious software, such as a virus, spyware or ransomware, onto your device or network to steal data, take control or demand money.
- Category
- Attacks
- Also called
- malware attacks, malicious software attack
- Last updated
Malware is short for "malicious software". The Australian Cyber Security Centre describes it as any code or program used for a malicious purpose. CISA frames it as software used to gain unauthorized access to systems in order to steal data, disrupt services or damage networks. A malware attack is the moment that software lands on your device and starts working.
Common types
Viruses, worms, trojans, spyware, adware and ransomware are the usual examples. Ransomware locks your files or systems until you pay. Information stealers are quieter: they collect saved logins and system details, mostly for financial gain.
How it gets onto your device
The usual routes are spam emails with malicious links or attachments, compromised websites, flaws in software you haven't updated, and apps that aren't what they claim to be. Many infections go unnoticed by the person whose device is affected, which is part of the point.
Why it matters to you
The damage often goes beyond the device. Stolen passwords can open your email and bank accounts, and your personal details can end up for sale or listed where anyone can find them, which feeds identity theft and scam calls.
Malware attack vs. phishing
Phishing is the trick: a message that talks you into clicking or sharing something. Malware is the payload that may arrive that way. A phishing email can deliver malware, but phishing can also just steal a password with no software involved.
How to protect yourself
- 1
Turn on automatic updates
CISA advises regular patching of software and operating systems, and says outdated applications are a target of most attacks. Enable automatic updates wherever they're offered.
- 2
Keep security software current
Make sure antivirus and anti-malware software and its signatures are up to date.
- 3
Back up your files offline
Back up regularly to a separate device and store it offline. CISA warns that an external drive left connected can be reached and corrupted by ransomware. Test that you can restore from it.
- 4
Use a standard account day to day
CISA suggests a standard user account for everyday use, because it limits what malware can change if it runs.
- 5
Limit what a stolen login can reach
If an information stealer gets your passwords, exposed personal details make the follow-up easier. Serus monitors the dark web and breach databases and alerts you when your data appears, and removes your details from the data brokers and people-search sites that list them.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
How do I know if I have malware?
Often you don't, because many infections go unnoticed. Warning signs can include a device that suddenly slows, programs you didn't install or accounts that behave oddly. Run a scan with up-to-date security software and change passwords from a clean device.
What is the difference between malware and a virus?
Malware is the umbrella term for any malicious software. A virus is one type, alongside worms, trojans, spyware and ransomware.
What should I do after a malware attack?
Disconnect the device from the internet, scan and clean it or restore from a clean backup, and change your passwords from a different, clean device. If money or accounts were affected, tell your bank and report the incident to your national cyber or fraud reporting service.
Sources
Something wrong or out of date? Tell us and we'll re-check it.