Software inserted into an IT environment, usually without the IT team’s knowledge, with the purpose of compromising the confidentiality, integrity, or availability of an organization’s data or otherwise disrupting the organization. Ransomware is a type of malware.