Cybersecurity Glossary

Drive by Download

Malware installed simply by visiting a compromised web page.

What Drive by Download means

A drive by download exploits a flaw in the browser or a plugin so that merely loading a page installs software. Legitimate sites are used as the vehicle after being compromised, and malicious advertising served through ad networks reaches even well known publishers.

Why Drive by Download matters for small businesses and nonprofits

This defeats the advice to only visit trusted sites, because the trusted site is the delivery mechanism. Browsers have become far more resistant, which makes prompt browser updating one of the highest value habits you can enforce.

What to do about Drive by Download

Three steps to deal with Drive by Download

  • Keep browsers updating automatically and restart them regularly so updates apply
  • Use a filtering resolver that blocks known malicious domains
  • Deploy an ad blocker, which removes a significant delivery channel

Not sure where you stand on this?

We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.