Skip to content

Malware

Hostile code that runs on a device you control. Ranges from broad-stroke commodity (ransomware-as-a-service, generic infostealers) to highly-targeted state-grade tools (Pegasus, Predator, Reign).

  • Mercenary spyware (mobile) — Pegasus (NSO Group), Predator (Intellexa/Cytrox), Reign (QuaDream). Zero-click or one-click; near-undetectable; reserved for high-value targets. See Citizen Lab for ongoing research.
  • Mobile RATs — Android stalkerware (mSpy, Cocospy), iOS configuration-profile abuse, jailbroken-device implants.
  • Commodity infostealers — see Credential Theft.
  • Ransomware — increasingly rare against individuals; still common against small orgs.
  • Browser extension malware — malicious or hijacked extensions exfiltrating session data.