A program that appears to be useful or harmless but that contains hidden code designed to exploit or damage the system on which it is run.