A trojanized download is a file that looks legitimate but contains hidden malicious code. The name comes from the idea of a “Trojan horse”: the file appears useful, trusted, or familiar, while secretly delivering malware when opened or installed.
This matters because many attacks succeed without bypassing security tools. Instead, they rely on user trust, especially in places where unofficial software, cheats, cracks, or free utilities are common. Once launched, a trojanized download can install a remote access trojan, steal passwords or tokens, drop additional malware, or create persistence on the device. Defenders look for warning signs such as unsigned files, suspicious installers, altered package hashes, unusual permissions, and downloads from untrusted sources. Strong file verification, reputation checks, and limiting the use of unofficial software help reduce the risk.