Cybersecurity Glossary
Payload
The part of an attack that actually does the damage.
What Payload means
Delivery gets the attacker in; the payload is what runs afterwards. It might be ransomware, a credential stealer, a remote access tool or a script that simply creates a second way back in. A single delivery method can carry very different payloads on different days.
Why Payload matters for small businesses and nonprofits
Understanding the separation explains why blocking one payload family is not protection. The same phishing campaign will deliver something else next week, so the delivery route and the response capability matter more than the specific payload.
What to do about Payload
- Focus controls on delivery routes and on response, not on one malware family
- Assume a payload has run and ask what it could reach from that account
- Keep endpoint detection tuned for behaviour rather than known files
Not sure where you stand on this?
We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.