thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Foundational

Drive-by Download

An unintended download of malicious code that occurs simply by visiting a compromised or malicious website.

Definition

Drive-by downloads exploit browser or plug-in vulnerabilities, or trick users with deceptive prompts, to install malware with little or no interaction. They are frequently delivered by exploit kits, malvertising and watering hole attacks. Patching, script controls and browser isolation are primary defenses.

Example

Visiting an infected site triggers a browser exploit that installs a banking trojan.

Exam tip

No user download click is required in a true drive-by; patching the browser is the best defense.

Related terms