Malware-Delivery
GitHub Abuse for Malware Delivery in 2026
Analysis of how GitHub is abused for malware delivery in 2026, including payload hosting, supply chain risks, and attacker evasion techniques.
Phishing — Deceptive Social Engineering to Steal Credentials and Deliver Malware
Phishing is a social engineering technique where attackers impersonate trusted entities to steal credentials, deliver malware, or gain initial access. This SECMONS glossary entry explains phishing variants, operational impact, and defensive controls.
Drive-By Compromise — Web-Based Malware Delivery
Drive-by compromise is an attack technique where malicious code is delivered to victims simply by visiting a compromised or malicious website, often exploiting browser vulnerabilities.
Drive-By Download Attack Technique — Silent Malware Delivery Through Compromised Websites
Technical explanation of drive-by download attacks, a technique in which malware is silently delivered to victims when they visit compromised or malicious websites.
Browser Exploitation — Web-Based Attack Techniques
Browser exploitation refers to attacks that target vulnerabilities in web browsers, plugins, or browser components to execute malicious code, steal credentials, or deliver malware to victims.
User Execution — Attacks Requiring User Interaction
User execution is an attack technique where malicious actions occur after a victim opens a file, runs a program, or clicks a link that triggers malware execution.
Malware Delivery Attack Technique — Distributing Malicious Software to Target Systems
Technical explanation of malware delivery techniques used by threat actors to distribute malicious software through email, compromised websites, and other intrusion vectors.