Technology · February 10, 2026 · Amelia Hart · 5 min
Malware is any software built to harm, hijack or spy on your device. Here are the main types, from viruses and ransomware to spyware, how infections happen, and the practical steps that keep you protected.
"Malware" is one of those words we hear constantly without ever quite pinning down. It is not a single thing, and it is not only a problem for big companies or careless people. It is a whole family of malicious programs, and a basic understanding of how they work is the foundation of staying safe online.
The good news: the same handful of sensible habits defends against almost all of it.
Malware, short for malicious software, is any program written deliberately to harm, hijack, disrupt or spy on a device or its owner.
That broad definition covers a lot of ground, from a program that quietly steals your passwords to one that locks every file you own. What unites them is intent: malware is built to work against you, usually for money, data or control. The differences between types come down to how they spread and what damage they do.
You do not need to be an expert, but recognising the common categories helps you understand the threats and the warnings you see.
| Type | What it does |
|---|---|
| Virus | Attaches to files or programs and spreads when they are opened or run. |
| Worm | Spreads by itself across networks, without needing you to do anything. |
| Trojan | Disguises itself as something useful to trick you into installing it. |
| Ransomware | Encrypts your files and demands payment to unlock them. |
| Spyware | Secretly monitors what you do, capturing data like passwords. |
| Adware | Bombards you with unwanted ads, sometimes bundling other malware. |
| Keylogger | Records every keystroke, often to steal logins and card numbers. |
Modern attacks frequently combine these. A trojan might pose as a free app, then quietly install spyware that harvests your banking details, for example.
Of all the categories, ransomware causes some of the most serious damage to individuals and organisations alike. It encrypts your files — photos, documents, everything — and demands a payment, usually in cryptocurrency, in exchange for the key.
Authorities generally advise against paying. It funds criminal operations and offers no guarantee you will get your files back.
The reliable defence is not paying but preparation. A separate, tested backup lets you wipe the device and restore your files without negotiating with anyone. Our guide to cloud backup and the 3-2-1 rule explains how to set one up so that ransomware becomes an inconvenience rather than a disaster.
It is tempting to imagine malware as something that strikes out of nowhere, but most infections begin with a human action the attacker tricked you into taking. The usual routes are:
Notice the pattern: most of these rely on either tricking you or finding software you have not updated. Both are within your control.
You do not need to be a security professional to be well protected. A layered set of habits stops the overwhelming majority of attacks:
If you suspect malware, act calmly and in order:
Because malware is so often the goal of a successful scam, treat the clean-up as the start of a wider review: change reused passwords, check your accounts for unexpected activity, and confirm your backups are intact.
Malware is the umbrella term for software built to harm you, spanning viruses, worms, trojans, ransomware, spyware and more. Most infections begin with a click on a bad link, an untrusted download, or unpatched software — all things you can guard against.
Keep your software updated, use reputable security tools, be sceptical of unexpected links and downloads, and keep a tested backup. Those everyday habits, not any single product, are what keep malware out of your digital life.