Malware, or Just Shadow IT?

About this interactive

What you are doing: deciding whether each case is clearly malware or legitimate software used outside IT’s control. The distinction: clearly malicious software is built to do harm — ransomware, a trojan, a worm, spyware, a rootkit. Shadow IT is legitimate software or a legitimate service brought in without IT’s knowledge or approval. Often it is meant to get work done, like a department’s own chat app; sometimes, like the lesson’s crypto miner on a business laptop, it is legitimate software put to the user’s own use. Either way it skips the processes that keep the company secure, so it brings licensing gaps, security blind spots, unsupported tools and lost productivity. How to use it: ask whether the software is designed to harm, or is a real tool used off the books. A wrong answer resets your streak and shows the right bin.

What you'll learn

Tell clearly malicious software from legitimate software used outside IT’s control (shadow IT), which can still endanger the enterprise
Explain why legitimate but unsanctioned software creates licensing, security, support, and productivity risks even when nothing is malware

Aligned to

CompTIA Security+

2.2 Explain common threat vectors and attack surfaces.

4.1 Given a scenario, apply common security techniques to computing resources.

Key terms

Shadow IT: The use of unauthorized software, systems, or services within an organization without IT department knowledge or approval. Shadow IT creates security blind spots because unmanaged assets fall outside standard patching, monitoring, and access controls.
Software Governance: The set of organizational policies and controls that regulate which software applications are approved, deployed, and supported on enterprise systems.
Malware: Software specifically designed to disrupt, damage, or gain unauthorized access to a system.
Jailbreaking: The process of bypassing a mobile device's built-in restrictions to gain elevated privileges, often exposing the device to unapproved and potentially malicious software.

Topics

Shadow It Software Governance Interactive Streak Sort

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →