Typical severity: High. Likelihood of attack: Medium. An adversary installs and executes malicious code on the target system in an effort to achieve a negative technical impact. Examples include rootkits, ransomware, spyware, adware, and others.
Employ robust cybersecurity training for all employees. | Implement system antivirus software that scans all attachments before opening them. | Regularly patch all software. | Execute all suspicious files in a sandbox environment.