Malware is a word that did not exist before 1990, yet it now describes one of the most significant threats of the digital age. It is a portmanteau, a blend of malicious and software, coined by the Israeli computer scientist Yisrael Radai as a convenient umbrella term for the growing zoo of hostile programs that plagued computer systems: viruses, worms, trojan horses, logic bombs, and other digital parasites.
The word's components have very different histories. Malicious comes from Latin malitia, meaning badness or ill will, from malus, meaning bad or evil. This Latin root has been extraordinarily productive in English, giving us malice, malevolent, malfunction, malpractice, malnutrition, maladroit, malign, and many others. The mal- prefix has become an English word-formation tool
Software is much younger, coined in 1960 by the statistician John Tukey as a contrast to hardware. The distinction was between the physical components of a computer (hard, tangible) and the programs that ran on them (soft, intangible). The -ware suffix in software comes from Old English waru, meaning goods, merchandise, or articles, the same element seen in hardware, kitchenware, and silverware.
Radai's coinage was not immediately successful. Through the early 1990s, individual terms like virus and trojan remained more common in both technical and popular usage. Malware gained traction as the variety of hostile software proliferated and a single, generic term became necessary. By the late 1990s, with the growth of the internet and the explosion of new threat types, malware had established itself as the standard term in both technical and mainstream vocabulary
The word proved exceptionally productive. It generated an entire family of -ware compounds describing specific types of unwanted or hostile software. Spyware monitors user activity without consent. Adware displays unwanted advertisements. Ransomware encrypts files and demands payment for their release. Scareware frightens users into purchasing unnecessary security products. Bloatware describes pre-installed software that consumes
The concept that malware names, programs with hostile intent, would have been incomprehensible to most people before the 1980s. The idea that software could be designed to harm its users rather than help them required a certain maturity in computing culture, a loss of innocence. The first computer viruses appeared in the early 1980s, initially as experiments or pranks rather than tools of crime. The Morris Worm of 1988, which accidentally crippled much of the early internet
The economics of malware have changed dramatically since 1990. Early malware was often the work of hobbyists, pranksters, or researchers demonstrating vulnerabilities. Modern malware is predominantly criminal in nature, developed and deployed for profit. Ransomware alone generates billions of dollars in payments
Malware occupies an interesting position in the vocabulary of technology. Unlike most tech terms, which are neutral or positive (software, hardware, download, upload, network), malware is inherently negative. Its very structure announces its intent: this is bad software. The clarity of the word, its transparency, is part of its success. You