Malware

What it means

Malware is the umbrella term for malicious software: programs that get onto a computer, phone or server without the user’s knowledge or consent and act against their interests. It includes viruses, trojans, spyware, keyloggers that capture keystrokes and ransomware that encrypts data.

The aims are stealing passwords and bank access, spying, obtaining personal data, using the device for further attacks or extortion. Modern malware often stays quiet for a long time so the attacker can learn as much as possible before the actual attack.

It most often reaches a company through a phishing email with an attachment or link, through unpatched software with a known flaw, through illegally downloaded programs or an infected USB stick. People are still the most common entry point.

How it works in practice

Protection rests on several layers: an up-to-date operating system and software thanks to patch management, security software ideally with EDR, restricted administrator rights and caution with email. No single layer is enough on its own.

The key safeguard is backups kept separate from the network. If malware encrypts or destroys data, the company restores it without paying a ransom. Backups must be test-restored regularly, not just created.

If an infection is suspected, the device should be disconnected from the network at once, not switched off without expert advice because traces would be lost, and the person responsible informed. If the malware may have obtained personal data, the company assesses whether it is a personal data breach that must be reported.

What to watch out for

A common mistake is using one computer for everything: online banking, accounting, private browsing and children’s games. That greatly increases the risk of infection. At the very least, the computer used to enter payments should be for work only.

The second risk is a false sense of security from antivirus. New malware often slips past classic antivirus. Restricted rights, two-factor authentication for banking and a rule that nobody opens an unexpected attachment without checking matter just as much.