malware

Malware combines Latin malus ('bad' or 'evil') with ware (from Old English waru, 'merchandise' or 'goods'—the same root that gives us 'hardware' and 'software'). The term emerged in the early 1990s when computer viruses and worms became a significant security threat. Yisrael Radai, an Israeli computer scientist, is credited with coining the term around 1990 in the context of antivirus software development.

Before 'malware,' the terminology was scattered and imprecise. Computers had 'viruses,' 'worms,' 'Trojan horses,' but there was no umbrella term. Radai's malware—simple, punchy, linguistically honest—solved this problem. It meant 'bad merchandise,' and that's exactly what malicious code was: unwanted software packaged as something else.

The first significant piece of malware that grabbed public attention was the Morris Worm in 1988, which infected computers across the ARPANET and brought down systems for days. Robert Morris, a graduate student at Cornell, created it supposedly as an experiment. He was prosecuted and became the first person convicted under the Computer Fraud and Abuse Act. The term 'malware' came into common use in the aftermath.

By the 2000s, malware had evolved from pranks into profit—ransomware, spyware, trojans stealing banking credentials. The word stayed the same but the threat multiplied. Today, antivirus companies release statistics on malware variants the way epidemiologists report disease strains. The metaphor of malicious software as plague is unavoidable.