Adware

Adware is software whose primary purpose is to display unwanted advertising on a device — pop-ups, injected banners, redirected searches, new browser toolbars and tabs the user never asked for. It occupies the gray zone of the malware spectrum: some adware is merely an aggressive monetization scheme disclosed in fine print, while other strains hijack browsers, harvest behavioral data, and open the door to outright malicious payloads.

How it works

Adware almost always arrives through consent that was never really informed. The classic vector is bundling: a free download — a PDF converter, a video player, a game — ships with "optional offers" pre-checked in the installer, and clicking through the defaults installs them all. Other routes include fake browser extensions, drive-by downloads from compromised sites, and fraudulent ads served through real ad networks (malvertising). Once installed, adware monetizes the victim in layers: showing ad impressions, redirecting searches through paid affiliate links, and frequently collecting browsing history and search queries for resale — the point where adware shades into spyware. The ads themselves are a second attack surface, often promoting tech support scams, fake security alerts, and further unwanted software.

How to defend

In a corporate environment, adware on an endpoint is a signal worth taking seriously: it means unvetted software is being installed, and the same path that delivered a toolbar can deliver an infostealer. Technically: restrict software installation to managed, approved sources, deploy browser extension allowlists, and let endpoint protection remove adware families rather than dismissing them as low-severity noise. Behaviorally: train employees to download software only from official sources, to uncheck bundled "offers" in installers, and to treat a sudden bloom of pop-ups or a changed search engine as something to report, not tolerate — in employee hands, "it's just ads" is how larger compromises stay unreported.