Crime and Justice Atlas

How Justice Is Served
Sign In
Text size
100%
Theme
Offense

Malware Distribution

Cyber and Technology-Enabled Offenses

Malware distribution is the offense of creating, deploying or spreading malicious software, code written to damage, disable, gain unauthorized access to, or otherwise compromise a computer system or network without the owner's consent, covering a wide range of software types including viruses, worms, trojans, ransomware and spyware. The offense generally reaches multiple stages of conduct, the creation of the malicious code, its deliberate transmission or planting on a target system, such as through a deceptive email attachment or a compromised download, and often a further unlawful act the malware is designed to carry out once installed, such as stealing data, encrypting files for ransom, or covertly recruiting the infected device into a larger network of compromised machines. Because malware can spread automatically once released, a single act of distribution can affect a very large number of victim systems with no further action by the offender, which most legal systems treat as an aggravating factor when malware distribution is charged and sentenced. Malware distribution is closely related to, and often charged alongside, the separate offenses of computer hacking, where the malware serves as the tool of unauthorized access, and ransomware extortion, where the malware's specific purpose is to enable a ransom demand, though malware distribution itself is defined by the act of creating and spreading the harmful code rather than by any one downstream use of it.

Facts
Classification Code
knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer 1
Typical Penalty
a fine under this title, imprisonment for not more than 10 years, or both, in the case of an offense under subsection (a)(5)(A) 1
Elements of OffenseSourced to the subject's own account
Malware (a portmanteau of malicious software) is any software intentionally designed to cause disruption or destruction to a computer, server, client, or computer network, leak private information, gain unauthorized access to information or systems, deprive access to information, or interfere with the user's computer security and privacy without their knowledge. 2
Notable ExampleSourced to the subject's own account
High-profile examples include the attack on Sony Pictures Entertainment in November 2014, which involved malware known as Shamoon (also referred to as W32.Disttrack). 2
Jurisdiction Variation
unauthorised modification of computer material, punishable by twelve months/maximum fine (or six months in Scotland) on summary conviction and/or ten years/fine on indictment 3
Classification
Offense Grade
Serious or Indictable Offense 1
Connections

Associated With

Source Wikipedia: Cybercrime

Has Offense Grade

Entity-backed identity for the offense-grade enum value this offense already carries, resolved to a crime concept by an explicit value-to-entity map (phase 3 bucket conversion, docs\design_entity_backed_browse_buckets_20260928.md). The offense-grade fact itself stays on the offense unchanged.

Sources
1. 18 U.S. Code section 1030 (Cornell LII)
Cornell Law School, Legal Information Institute
  • 18 U.S.C. section 1030(a)(5)(A)
    knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer
  • 18 U.S.C. section 1030(c)(4)(B)
    a fine under this title, imprisonment for not more than 10 years, or both, in the case of, (i) an offense under subsection (a)(5)(A)
View the Source
2. Malware (Wikipedia)
Wikipedia
  • Lead section, first sentence
    Malware (a portmanteau of malicious software) is any software intentionally designed to cause disruption or destruction to a computer, server, client, or computer network, leak private information, gain unauthorized access to information or systems, deprive access to information, or interfere with the user's computer security and privacy without their knowledge.
  • Purposes section
    High-profile examples include the attack on Sony Pictures Entertainment in November 2014, which involved malware known as Shamoon (also referred to as W32.Disttrack).
View the Source
3. Computer Misuse Act 1990 (Wikipedia)
WikipediaComputer Misuse Act section, Section 3 list item
Quote, Computer Misuse Act section, Section 3 list item
unauthorised modification of computer material, punishable by twelve months/maximum fine (or six months in Scotland) on summary conviction and/or ten years/fine on indictment
View the Source
Wikipedia: Cybercrime
Associated With: Cybercrime, Lead and law-enforcement sections
Quote, Associated With: Cybercrime, Lead and law-enforcement sections
Cybercrime encompasses a wide range of criminal activities that are carried out using digital devices and/or networks.
View the Source
Comments (0)
No comments yet. Be the first to share a thought.
Reader Challenges (0)
No disputes yet. Spotted an error or a better source? Open the first one.