SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-logic-bomb

Code intentionally hidden in software that triggers a malicious action when conditions are met is called what?

Logic bomb, dormant code that waits for a trigger.

Start playing free

  1. A keylogger
  2. A botnet
  3. A logic bomb ✔

Why: The trigger could be a date, a missing employee record or a certain command. Because it hides inside normal code, code review and change control help catch it.

Huh, didn't know that: NIST SP 800-53 warns that logic bombs can hide in commercial off-the-shelf software as well as custom-built software.

The dad joke
A logic bomb is patient. It has all the time in the world and a calendar.
Like this card?
Play the game

References

Answer: A logic bomb. The trigger could be a date, a missing employee record or a certain command. Because it hides inside normal code, code review and change control help catch it.

  1. NIST CSRC Glossary: logic bomb csrc.nist.gov/glossary/term/logic_bomb
    A piece of code intentionally inserted into a software system that will set off a malicious function when specified conditions are met.
    Checked 2026-10-10.
  2. NIST SP 800-53 Rev. 5, Security and Privacy Controls nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
    Malicious code may be present in commercial off-the-shelf software as well as custom-built software and could include logic bombs
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhich malware spreads by inserting copies of itself into host programs or data files?Security & PrivacyWhich malware is self-contained and spreads across a network on its own, without user action?Security & PrivacyWhich malware looks like a useful program but has a hidden malicious purpose and does not replicate?

That's stuff everyone should know.