A small program that can automate tasks in applications (such as Microsoft Office) which attackers can use to gain access to (or harm) a system.