It usually consists of a software program that has been secretly installed on your computer by a hacker. Can be either downloaded directly on the host computer (e.g. via phishing attacks) or it can be downloaded remotely.