Malware 

Share

Latest news on malware, malicious software, ransomware attacks, spyware, adware, grayware, trojan horses, remote access trojans, computer viruses, internet worms, rootkits, keyloggers, botnets, phishing, infostealers, zero-day exploits and supply chain attacks, plus the wider cyber threats facing individuals and organisations worldwide.

Malware, short for malicious software, is any code built to damage systems, steal information or give an attacker control. It ranges from nuisance grayware, badware and adware to spyware, stealware, scareware, cryptojacking, keyloggers (also written as key loggers) and rootkits that hide deep inside a device. Computer viruses, internet viruses and internet worms replicate and spread, a logic bomb waits for a trigger, and a trojan horse disguises itself as something useful. Researchers track each malware family, malware strain and malware variant by name, and new ones appear constantly.

Attacks often begin with phishing, business email compromise, malvertising, email spam, a macro virus or credential stuffing. A dropper or loader then handles payload delivery, and a backdoor or remote access trojan calls home to command and control servers, known as C2 servers, and wider C2 infrastructure. Privilege escalation and lateral movement spread the intrusion, often by living off the land (LOTL) with legitimate tools, before data exfiltration. Fileless malware and polymorphic malware evade detection, while man-in-the-middle (MITM) attacks, remote code execution flaws and firmware attacks reach beyond the desktop.

Ransomware, once called a cryptovirus, remains the most disruptive threat, and double extortion gangs now steal data as well as encrypting it. Supply chain attacks and zero-day exploits, such as the 2023 MOVEit flaw used for mass data theft, can hit hundreds of organisations at once. Infostealers harvest passwords at scale and botnets of hijacked devices fuel spam and fraud, while AI-assisted malware is an area researchers watch closely. Law enforcement hits back, as in 2024 when the UK's National Crime Agency and the FBI led Operation Cronos against LockBit, but groups can try to rebuild and the ethics of paying ransoms remain debated.

Behind the technical terms are real people and services. The WannaCry ransomware worm disrupted the NHS in 2017, and in 2021 the Colonial Pipeline attack shut a major US fuel network for about five days. In 2025, cyber attacks on Marks & Spencer and Jaguar Land Rover disrupted online sales and production. Defenders matter too, from the young British researcher who found WannaCry's kill switch to everyday basics such as backups, patching and multi-factor authentication.

The story began with experiments, including the early 1970s Creeper program that hopped between networked computers. The 1988 Morris worm brought the first widespread internet outbreak, and email and network worms such as the Melissa virus, ILOVEYOU, Sobig, Mydoom and the Ramen worm followed. Stuxnet, widely believed to be a state-built cyberweapon aimed at Iran's nuclear programme, marked the arrival of state-sponsored malware. In 2017 WannaCry and NotPetya, both using the leaked EternalBlue exploit, showed how ransomware-style attacks and a compromised software update could spread across borders.

Our NewsNow malware news feed gathers the latest headlines on ransomware, spyware, trojans, botnets, computer viruses, zero-day exploits and other cyber threats from reliable sources, updated constantly. Whether you are an IT professional, a business owner or simply want to stay safe online, staying informed about malware helps you spot new threats early.