Threat Explainers · 5 min read
What Is a Computer Worm?
A worm is malware that copies itself from machine to machine without anyone clicking anything. That autonomy is what makes worms the fastest-spreading category ever observed.
Published 2026-08-09 · Last updated 2026-08-09
How worms propagate
They scan for reachable systems and exploit an unpatched network-facing vulnerability, weak or reused credentials, exposed file shares, or removable media with autorun behaviour. Once resident, the new host starts scanning too, which is why growth is exponential rather than linear.
Why patching is the real defence
The large historical worm outbreaks all exploited vulnerabilities for which patches already existed. Automatic updates, a firewall that blocks unsolicited inbound traffic, and not exposing services such as Remote Desktop directly to the internet close nearly the whole attack surface for a home user.
What worms carry
Propagation is only the delivery mechanism. The payload can be ransomware, a botnet client, a cryptominer or an infostealer — which is why a worm outbreak on a home network should be treated as a full compromise, not a nuisance.
Frequently asked questions
- What is the difference between a worm and a virus?
- A virus needs a host file and a user action to spread. A worm spreads itself over the network with no interaction at all.
- Are worms still a threat to home users?
- Less than in the 2000s, thanks to default firewalls and automatic updates, but exposed remote-access services and unpatched routers still get hit.