# What is Malware?
Malware (malicious software) is any program or file created with the intent to harm, exploit, or compromise a computer, network, or server.
# Major Categories of Malware
Ransomware (encrypts victim files for extortion), Trojans (disguised as legitimate software), Rootkits (hides deep inside kernel space), Spyware/Keyloggers, and Botnets.
# Infection & Attack Lifecycle
Delivery (phishing/exploit kit) → Execution → Persistence (registry keys/cron jobs) → Command & Control (C2) Communication → Action on Objectives (data exfiltration or encryption).
# Static vs. Dynamic Analysis
Static analysis inspects strings, imports, and decompiled assembly without running the binary. Dynamic analysis executes the malware in an isolated sandbox to observe API calls, file writes, and network connections.
# Detection & Endpoint Protection
Modern EDR (Endpoint Detection & Response) platforms use behavioral heuristics and machine learning to stop malicious processes before irreversible damage occurs.