1. In computer security, a computer program or process that mimics the legitimate behavior of a normal system feature (or other apparently useful function), but performs malicious activities once invoked by the user.