Riskware is computer software designed to facilitate or enable activities that can put a user or a system in danger of infection from malicious sources. Riskware is a broad classification encompassing anything from spyware, to network scanning tools, to ‘packet sniffing’ software to the well-known viruses, worms, and Trojans.
The term was first used to describe software which was deemed by users to be potentially dangerous, with the implication being that some software which is deemed to be acceptable, or even necessary for certain tasks, could still be liable to potentially malicious use. As software technology has advanced, riskware can now be classified in terms of varying levels of maliciousness.
Riskware is generally categorized as malicious software, but it is different from viruses, worms, and Trojans in that while it can be used to carry out malicious activities, riskware does not automatically propagate itself or otherwise transmit itself from one machine to another without user intervention. This means that riskware is more of a threat for users who have downloaded it, as it is likely to already be running on a computer, and will require user interaction to access the riskware’s malicious functions.
The purpose of riskware is often to steal user data, or to gain access to personal or company information. As such, it is important for users to be aware of the types of riskware that exist, and to be careful when downloading any software, as it might contain a malicious payload.
Riskware can also be used for legitimate purposes in certain industries, such as penetration testing; however, it can still pose a threat if it is released into the wild or otherwise accessed by would-be malicious actors. As such, it is important for users to ensure that any riskware they download or use is from a trusted source.
