Malware infection that occurs simply by visiting a compromised or malicious website.
A drive-by attack (drive-by download) infects visitors to compromised or malicious websites without any action beyond viewing the page. Attackers exploit browser vulnerabilities, plugin flaws, or use malicious scripts to deliver malware automatically. Drive-by attacks often target outdated browsers, Java, Flash, or PDF readers. Victims don't need to click or download anything—simply loading the page triggers infection. Keeping browsers and plugins updated, using ad blockers, and browsing with restricted privileges reduce drive-by risk.
Why It Matters
The DSC Perspective:
Drive-by attacks demonstrate why keeping browsers and plugins updated matters. They also show why blocking unnecessary plugins and using web filtering adds value—preventing access to malicious sites stops infections before they start.