{"id":40829,"date":"2015-01-26T06:00:16","date_gmt":"2015-01-26T14:00:16","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=40829"},"modified":"2025-08-17T19:59:34","modified_gmt":"2025-08-18T02:59:34","slug":"what-is-rootkit","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/what-is-rootkit\/","title":{"rendered":"What is a Rootkit?"},"content":{"rendered":"

A rootkit is a kind of software that conceals malware<\/a> from standard detection methods. A good analogy for a rootkit would be a burglar breaking into your house. The burglar is dressed all in black, so that his form blends into the darkness. He tiptoes around to hide his sounds so he\u2019s more likely to go undetected as he steals your belongings. But unlike the burglar, who usually takes your stuff and leaves, an efficient rootkit can stick around for years doing its work, robbing your computer or mobile device of data.<\/p>\n

How do you get a rootkit? One way is via a , or a malicious file that looks benign, like a plug-in that you download or an opening an email attachment. Rootkits can also be spread through infected mobile apps.<\/p>\n

Once downloaded, a \u00a0rootkit will interfere with your device\u2019s functions, including your security software. If you run a security scan, a rootkit will often prevent your security software from showing you this information so you\u2019ll have no idea that malware is running on your device.<\/p>\n

Security Tips<\/h2>\n

Because of this, it is difficult to detect a rootkit. Detection methods include looking for strange behavior on your device or scanning your device\u2019s memory. If you do believe that you have a rootkit on your computer or mobile device, you can either reinstall your operating system (after backing up your data, of course) or use a rootkit removal tool like<\/p>\n