Cybersecurity Glossary

Trojan

Malicious software disguised as something legitimate that the user installs willingly.

What Trojan means

A trojan looks like a useful program: a document viewer, an invoice, a browser extension, a cracked version of paid software. The user runs it deliberately, which is why it bypasses defences built around blocking unwanted downloads. Once running it usually installs something else, a remote access tool or a credential stealer.

Why Trojan matters for small businesses and nonprofits

Trojans exploit the gap between what an organisation permits and what it monitors. If staff can install software freely on work machines, one plausible looking download is enough to give an attacker a foothold inside your network.

What to do about Trojan

Three steps to deal with Trojan

  • Restrict software installation to an approved list or an internal catalogue
  • Block or review browser extensions, a common and overlooked route
  • Educate staff that pirated software is the most reliable way to invite malware in

Not sure where you stand on this?

We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.