Malware Explained: Types, Signs, How It Spreads and Protection

Malware is malicious software designed to damage a device, steal information, spy on users, disrupt operations or give attackers unauthorized access to systems. It includes familiar threats such as viruses and ransomware, but modern malware also includes credential-stealing programs, remote-access trojans, spyware, downloaders, botnet malware and destructive wipers.

Understanding malware matters because malicious software is often only one stage of a larger cyberattack.

An attacker may initially exploit an unpatched vulnerability, trick someone through phishing or distribute a fake software installer. Malware then creates access, steals passwords or session tokens, communicates with criminal infrastructure and allows another attacker to take over. Ransomware or large-scale data theft may appear only at the end of that chain.

NIST broadly defines malware as software or firmware intentionally designed to perform unauthorized processes that harm the confidentiality, integrity or availability of a system. Viruses, worms, trojans and spyware all fall within that broader category.

NIST malware definition and terminology

The threat remains highly relevant in 2026. Verizon’s 2026 Data Breach Investigations Report says vulnerability exploitation has become the leading initial breach vector in its dataset, accounting for 31% of breaches, while ransomware is involved in 48% of breaches.

These numbers do not mean malware causes every breach. They show why understanding how malicious code fits into a modern intrusion is an essential part of cybersecurity.

For the broader framework around cyber threats, identity security, phishing, backups, data protection and incident response, start with The News Ink’s main Cybersecurity Explained guide.

Malware at a Glance

Type	Main purpose	Typical behavior
Virus	Infect files or programs	Replicates when infected software runs
Worm	Spread automatically	Moves between vulnerable systems or networks
Trojan	Disguise malicious software	Pretends to be a legitimate file or application
Ransomware	Extortion	Encrypts systems or steals data and demands payment
Spyware	Surveillance	Secretly monitors activity and collects information
Infostealer	Credential theft	Steals passwords, cookies, tokens and wallet data
Keylogger	Capture input	Records keystrokes or other user activity
Rootkit	Hide privileged access	Helps attackers remain concealed on a system
Bot malware	Remote control	Turns a device into part of a botnet
Wiper	Destruction	Deletes or corrupts information to disrupt operations

These categories can overlap.

A single infection might begin as a trojan, install an infostealer, create persistent remote access and eventually allow ransomware operators onto the network.

That is why labeling malware by only one category can sometimes oversimplify how modern attacks work.

What Is Malware?

The word malware comes from malicious software.

Its defining characteristic is intent.

Legitimate software performs functions authorized by the user or organization. Malware performs unauthorized or harmful actions.

Those actions may include:

• stealing usernames and passwords;
• recording activity;
• encrypting files;
• deleting information;
• downloading additional malicious programs;
• disabling security tools;
• controlling a device remotely;
• joining a botnet;
• spying through a microphone or camera;
• stealing cryptocurrency;
• or creating persistent access for another attacker.

NIST’s malware guidance describes malicious code as software covertly inserted into a system to compromise the confidentiality, integrity or availability of data, applications or operating systems.

This definition also explains why “virus” and “malware” are not synonyms.

A virus is one type of malware.

Ransomware is another.

Spyware is another.

Saying every malicious program is a virus is similar to calling every vehicle a car.

Why Malware Still Matters in 2026

Cyberattacks have become more complex, but malicious software remains central to many of them.

The 2026 Verizon DBIR says 48% of breaches in its dataset involve ransomware. More importantly, the way attackers gain access is changing. Vulnerability exploitation now accounts for 31% of breaches and has surpassed stolen credentials as the leading initial vector in Verizon’s analysis.

That means malware protection cannot focus only on suspicious email attachments.

Attackers can compromise vulnerable internet-facing systems, use stolen credentials or exploit trusted third-party access before installing malicious tools.

Microsoft’s 2025 Digital Defense Report also highlights the increasing importance of information stealers. It describes infostealer malware such as Lumma Stealer, RedLine, Vidar, Atomic Stealer and Raccoon Stealer being used to harvest passwords, session tokens and cryptocurrency information.

Microsoft describes an ecosystem in which one criminal infects a device, another sells the stolen credentials and an access broker or ransomware group later uses those credentials for a larger attack.

This means a malware infection on one laptop should not always be treated as an isolated inconvenience.

The stolen information can create future risk long after the malicious program itself has been removed.

1. Computer Viruses

A computer virus is malicious code that attaches itself to another file or program and replicates when that infected host runs.

NIST describes a virus as malicious software that propagates by modifying other programs to include a copy of itself. Unlike a worm, a virus generally needs its infected host program to run before it becomes active.

Viruses may:

• alter files;
• damage information;
• display unwanted messages;
• install additional malware;
• or spread through infected files.

Viruses were particularly prominent in earlier eras of personal computing, but the term remains widely used by the public to describe almost any malicious software.

Technically, however, modern threats are much broader.

2. Worms

A worm is self-replicating malware capable of spreading across systems or networks.

Unlike a traditional virus, it does not necessarily need to attach itself to another application.

NIST defines a worm as a self-contained program capable of propagating through networks, sometimes without user intervention.

That ability makes worms dangerous in large environments.

If one vulnerable system becomes infected, the malware may scan for additional devices and continue spreading automatically.

Historically, major worm outbreaks demonstrated how quickly malicious software could move across connected systems.

The defensive lesson remains current:

network segmentation, timely patching and limiting unnecessary services can reduce how far an infection travels.

3. Trojan Malware

A trojan disguises malicious software as something legitimate or useful.

The name comes from the Trojan Horse story: the danger is hidden inside something the victim willingly accepts.

A trojan could appear to be:

• a free game;
• a document;
• a browser extension;
• cracked software;
• a mobile application;
• a security update;
• or a useful utility.

The user installs the program believing they are receiving one thing while malicious functionality operates in the background.

CISA describes trojans as malware disguised as normal files that trick users into downloading them, allowing unauthorized access to the computer.

Trojans are particularly effective because they exploit trust rather than automatically breaking into a system.

4. Ransomware

Ransomware is among the most damaging forms of malware.

The FBI defines ransomware as malicious software that blocks access to files, systems or networks and demands payment for restoring access. Some versions encrypt local files, attached drives and network-connected systems.

FBI ransomware guidance

Modern ransomware frequently involves more than encryption.

Attackers may first steal sensitive information and then threaten to publish it.

This is commonly called double extortion.

A victim that can restore files from backup may therefore still face pressure because confidential information has already left the network.

Verizon’s 2026 DBIR reports ransomware in 48% of breaches in its dataset.

CISA recommends offline or otherwise protected backups, timely software updates, phishing-resistant MFA, endpoint monitoring and incident-response planning as important ransomware defenses.

CISA StopRansomware Guide

5. Spyware

Spyware is designed to collect information secretly.

NIST defines spyware as malicious code installed without the user’s knowledge to gather information about individuals or organizations.

It may collect:

• browsing activity;
• account information;
• device details;
• location information;
• messages;
• or other sensitive data.

Some commercial applications can also create spyware-like risks when powerful monitoring functions are misused.

The defining cybersecurity concern is unauthorized surveillance.

6. Infostealers

Information stealers, commonly called infostealers, have become one of the most important malware categories to understand.

Instead of immediately destroying a system, an infostealer quietly extracts valuable digital information.

Targets may include:

• browser passwords;
• cookies;
• authentication tokens;
• cryptocurrency wallets;
• autofill information;
• browser history;
• system details;
• and credentials stored in applications.

Why are browser cookies and session tokens important?

Because a stolen token can sometimes let an attacker access an authenticated session without relying only on the victim’s password.

Microsoft’s Digital Defense Report says infostealers have become important first-stage tools in modern cybercrime. It specifically notes that criminals distribute them through malvertising, SEO poisoning, cracked software and deceptive techniques such as ClickFix.

Verizon’s research has also connected infostealer credential data with later ransomware activity. Its 2025 analysis found that among ransomware victims it could correlate, 54% had domains appearing in infostealer logs or marketplace postings, while 40% included corporate email addresses. Verizon appropriately notes that this is suggestive evidence rather than proof that every credential was used in the later attack.

This is why changing compromised credentials after an infection can be just as important as removing the malware itself.

7. Keyloggers

Keyloggers record what a user types.

That can expose:

• passwords;
• messages;
• search queries;
• financial details;
• and other sensitive information.

Some keylogging technology has legitimate administrative or accessibility uses.

The security problem arises when it is installed or operated without authorization.

A keylogger may be a standalone malicious program or one function within a larger spyware or infostealer package.

8. Rootkits

Rootkits are designed to create or preserve privileged, hidden access to a compromised system.

They can make malicious activity more difficult to detect and may help attackers maintain persistence.

CISA describes a rootkit as malware that can create a continuing backdoor into a computer, enabling additional compromise.

Modern endpoint security has made many traditional rootkit techniques harder to use, but the underlying attacker goal remains important:

stay hidden and maintain access.

9. Bot and Botnet Malware

Some malware turns infected devices into remotely controlled systems called bots.

Large groups of compromised devices form a botnet.

Attackers can use botnets for:

• distributed denial-of-service attacks;
• spam;
• credential attacks;
• malware distribution;
• click fraud;
• cryptomining;
• or other criminal activity.

The device owner may notice little unusual behavior while the computer, router or internet-connected device quietly performs tasks for an attacker.

This is one reason malware can create harm beyond the original victim.

An infected device can become infrastructure for attacks on somebody else.

10. Wipers and Destructive Malware

Not all malware is designed to make money.

Wiper malware is intended to erase, corrupt or otherwise destroy information.

It may target:

• files;
• storage systems;
• boot records;
• servers;
• or operational infrastructure.

Destructive malware is particularly concerning in geopolitical conflicts and sabotage operations because recovery, rather than extortion, may be the attacker’s real objective.

Backups become critically important, but recovery must be tested before an emergency.

Other Malware Categories Worth Knowing

The malware landscape does not fit perfectly into ten categories.

Other terms users may encounter include:

Downloader

A relatively small malicious program whose primary purpose is to download additional malware.

Dropper

Malicious software designed to install another payload onto a system.

Cryptojacker

Malware that secretly uses the victim’s computing resources to mine cryptocurrency.

Remote Access Trojan

A trojan that gives an attacker remote control over the compromised system.

Adware

Software that displays unwanted advertising. Not all adware is considered malware, but some variants behave intrusively, track users or introduce security risks.

Fileless Malware

Malicious activity that attempts to rely heavily on legitimate system tools, scripts or memory instead of traditional malicious executable files stored on disk.

These categories often describe what the malware does or how it operates, rather than completely separate species.

How Malware Actually Infects a Device

An infection normally requires some pathway into the system.

Understanding those pathways is one of the most useful defenses.

Phishing Emails and Messages

Attackers may send:

• malicious attachments;
• links to fake websites;
• links that trigger malicious downloads;
• password-protected archives;
• or documents containing deceptive instructions.

Phishing remains effective because attackers can make a malicious action appear legitimate.

The News Ink’s phishing warning-signs guide explains this attack path in greater detail. The URL is included in the verified cybersecurity cluster.

Do not assume an email is safe because it appears professional.

A compromised legitimate account can also distribute malicious content.

Malicious Advertising

Malvertising uses advertisements or advertising infrastructure to direct users toward malicious content.

Some campaigns imitate legitimate software download pages.

Microsoft reports that modern infostealers are distributed through malvertising and related deception methods.

SEO Poisoning

Attackers can try to manipulate search results so malicious download pages appear when people search for software, documents or technical help.

A user believes they are downloading a legitimate utility.

Instead, they receive malware.

This is particularly relevant when searching for free versions of commercial software, unofficial installers or specialized utilities.

Pirated and Cracked Software

Cracked applications are a natural distribution channel for trojans and infostealers because users expect modified executable files and may intentionally disable security warnings to install them.

Microsoft specifically identifies cracked software as one infection pathway associated with infostealers.

There is no reliable way to know what additional code an unofficial cracked installer contains.

Fake Software Updates

A compromised or deceptive page may claim that:

• the browser needs an update;
• a video codec is missing;
• security software is outdated;
• or a document viewer must be installed.

Legitimate updates should normally come through the operating system, application itself or official vendor source.

Software Vulnerabilities

Malware does not always require someone to click.

Attackers can exploit flaws in exposed software.

This attack path has become particularly important. Verizon’s 2026 DBIR says vulnerability exploitation reached 31% of breaches, making it the leading initial access vector in the report for the first time.

That makes software updates a security control, not merely a source of new features.

Stolen Credentials

Sometimes attackers gain legitimate-looking access using a stolen username and password.

Those credentials might have come from:

• phishing;
• previous breaches;
• infostealers;
• password reuse;
• or underground criminal markets.

After signing in, an attacker may deploy additional malicious tools.

This is one reason The News Ink’s multifactor authentication guide is closely connected to malware defense. The verified internal library includes that page alongside the wider phishing and account-security cluster.

MFA does not prevent every infection.

But it can make stolen passwords much less useful.

Removable Media and Shared Files

USB drives and other removable devices can spread malicious files between computers.

This is particularly important in environments where devices move between isolated networks.

Organizations should control removable media according to risk rather than assuming every USB device is trustworthy.

Supply-Chain Compromise

A dangerous scenario occurs when attackers compromise software or infrastructure that users already trust.

Instead of convincing thousands of people to download an obviously suspicious file, the attacker compromises a vendor or software distribution channel.

This can turn an existing trust relationship into the infection mechanism.

What Happens After Malware Gets In?

A sophisticated infection may progress through several stages.

Stage	What may happen
Initial access	Phishing, exploit, malicious installer or stolen credentials
Execution	Malicious code runs
Persistence	Malware attempts to survive restarts or remain accessible
Privilege escalation	Attacker tries to gain more powerful permissions
Credential access	Passwords, cookies or tokens are stolen
Command and control	Infected device communicates with attacker infrastructure
Lateral movement	Attack spreads to other systems
Collection	Valuable information is identified
Exfiltration	Data is transferred outside the network
Impact	Encryption, extortion, destruction or disruption occurs

Not every infection follows all of these stages.

But the table explains why detecting malware early matters.

The visible ransomware message may be the last stage, not the beginning.

CISA specifically warns that ransomware can follow earlier precursor-malware infections and that organizations need to investigate whether other malicious activity occurred before the final ransomware payload appeared.

Common Signs of a Malware Infection

Malware developers often try to avoid detection, which means an infected computer may show no obvious symptoms.

Still, unusual behavior can provide warning signs.

1. Sudden Performance Problems

A computer may become unusually slow, use excessive CPU resources or experience unexplained disk activity.

Performance problems have many innocent causes, so slowness alone does not prove an infection.

Look for several indicators together.

2. Unexpected Pop-Ups or Browser Changes

Watch for:

• persistent advertisements;
• changed homepages;
• unknown extensions;
• unusual redirects;
• or search results going somewhere unexpected.

3. Security Tools Stop Working

Malware may attempt to disable antivirus software, firewalls, logging or update services.

Unexpected security-control changes deserve investigation.

4. Unknown Applications Appear

Programs, browser extensions or services that nobody remembers installing can indicate unwanted or malicious software.

5. Accounts Show Suspicious Activity

Signs can include:

• unfamiliar logins;
• password-reset notices;
• unknown emails;
• unauthorized transactions;
• or security alerts from locations you do not recognize.

Credential-stealing malware may reveal itself through account compromise rather than obvious device symptoms.

6. Files Become Inaccessible

If many files suddenly receive unusual extensions or stop opening and a ransom note appears, ransomware is a strong possibility.

The FBI notes that victims often first realize ransomware has infected a system when they can no longer access information or see a ransom message.

7. Excessive Network Activity

A device communicating constantly while apparently idle can deserve investigation.

Legitimate cloud synchronization and updates can also create network traffic, so this indicator needs context.

8. Battery Drain or Mobile Instability

On phones, suspicious apps may contribute to:

• unusual battery drain;
• repeated crashes;
• freezing;
• unexpected permissions;
• or unexplained background activity.

CISA’s mobile guidance advises reviewing permissions and installing applications only from trusted sources.

9. Camera or Microphone Behaves Unexpectedly

Unexpected activation can have innocent explanations, but unexplained access should prompt a permissions review and security check.

10. Friends Receive Messages You Did Not Send

This may indicate an account compromise rather than malware directly, but credential theft from an infected device is one possible cause.

What To Do If You Think You Have Malware

Do not panic and start deleting random files.

A careful response reduces the chance of making the situation worse.

Disconnect the Device When Necessary

If active malware appears to be spreading, stealing data or communicating with an attacker, disconnecting the affected system from Wi-Fi or the network can help contain it.

CISA’s ransomware response guidance recommends immediately isolating impacted systems.

For a company device, contact the IT or security team rather than conducting your own investigation unless policy tells you otherwise.

Use Trusted Security Software

Run updated security tools from a reputable source.

Do not respond to random browser pop-ups claiming they discovered malware.

Fake antivirus warnings are themselves a common scam technique.

Preserve Evidence in Serious Incidents

Businesses should avoid destroying evidence before understanding the scope of an attack.

Logs, suspicious files, authentication events and network records can help incident responders determine what occurred.

CISA advises organizations to collect relevant artifacts and preserve volatile evidence during serious ransomware incidents.

Change Compromised Credentials

If an infostealer or credential-stealing trojan may have been present, removing the malicious program is not enough.

Passwords or session tokens may already have been stolen.

Change important credentials from a known-clean device.

Start with:

1. email;
2. password manager;
3. banking;
4. work accounts;
5. cloud storage;
6. social media.

Use unique passwords for each service.

The News Ink’s guide to password managers explains why unique credentials reduce the damage one compromised password can cause. That page is live and part of the cybersecurity cluster.

Consider Rebuilding the Device

In serious compromises, particularly where privileged or persistent malware is suspected, simply deleting one detected file may not create enough confidence that the system is clean.

Organizations may choose to reimage affected systems and restore data from trusted backups.

CISA has recommended reimaging compromised hosts in malware incident-response scenarios when appropriate.

Investigate Whether Data Was Stolen

A malware incident can become a data breach.

Organizations may need to determine:

• what information was accessed;
• what information left the network;
• which accounts were compromised;
• whether notifications are legally required;
• and whether customers, employees or regulators need to be informed.

The News Ink’s data breach response guide is the appropriate next cluster resource for that stage. Its URL is included in the verified site library.

How to Protect Yourself From Malware

There is no single perfect malware defense.

Strong protection comes from layers.

Keep Software Updated

Patch:

• operating systems;
• browsers;
• applications;
• phones;
• routers;
• VPN appliances;
• and internet-facing services.

The growing importance of vulnerability exploitation makes timely updates especially important.

Install Software From Trusted Sources

Use official vendor sites, trusted stores or managed organizational software repositories.

Be especially cautious about:

• pirated software;
• cracks;
• unknown browser extensions;
• unofficial mobile stores;
• and download websites filled with misleading buttons.

Treat Unexpected Messages With Suspicion

Do not automatically open an attachment simply because it appears to come from someone you know.

Accounts can be compromised.

Confirm unusual requests independently.

Use Modern Endpoint Protection

Antivirus and anti-malware tools remain useful, but modern protection increasingly combines multiple techniques such as behavioral detection, endpoint monitoring and application controls.

CISA recommends automatically updated security tools and, for organizations, centrally managed endpoint protection or EDR where appropriate.

Use MFA

Malware that steals passwords becomes less powerful when important accounts require additional authentication.

Prioritize:

• email;
• password managers;
• banking;
• VPNs;
• cloud services;
• administrative accounts.

Use Unique Passwords

Password reuse turns one stolen credential into many compromised accounts.

Use a reputable password manager or passkeys where appropriate.

Back Up Important Data

Maintain backups of critical information.

For organizations, CISA recommends offline or otherwise protected backups and regular restoration testing because ransomware may attempt to encrypt or delete accessible backups.

A backup that has never been tested is only an assumption.

Limit Administrator Privileges

People should not routinely perform everyday tasks using highly privileged accounts when those permissions are unnecessary.

If malware runs with limited privileges, the potential damage may also be more limited.

Protect the Browser

Remove extensions you no longer use.

Keep the browser updated.

Avoid allowing suspicious sites to send notifications.

Be careful with download prompts and fake update notices.

Secure Mobile Devices

Download applications from trusted stores.

Review permissions.

Do not grant a simple flashlight, calculator or game access to contacts, microphones or files without a legitimate reason.

Keep Android or iOS updated.

Build an Incident Plan

Businesses need to decide before an attack:

• who responds;
• who can isolate systems;
• where backups are stored;
• how employees communicate if normal systems fail;
• who contacts authorities;
• and how customers are notified.

Security planning reduces confusion when systems are already under pressure.

Is Antivirus Enough to Stop Malware?

No.

Antivirus is one layer of protection, not an entire cybersecurity strategy.

Modern attacks can involve:

• stolen credentials;
• exploited vulnerabilities;
• malicious scripts;
• legitimate remote-management tools;
• social engineering;
• supply-chain compromise;
• and data theft before a traditional malicious file is deployed.

The main The News Ink cybersecurity pillar makes the same point: effective protection requires identity security, software updates, backups, monitoring, incident response and safe user behavior alongside anti-malware technology.

Defense in depth is stronger than depending on one product to recognize every threat.

Malware Protection Checklist

Protection	Personal users	Businesses
Automatic updates	✅	✅
Trusted anti-malware protection	✅	✅
Unique passwords	✅	✅
MFA/passkeys	✅	✅
Regular backups	✅	✅
Phishing awareness	✅	✅
Restricted admin access	Useful	Essential
Endpoint monitoring/EDR	Optional	Important
Network segmentation	Limited relevance	Important
Central logging	Limited relevance	Important
Incident-response plan	Basic	Essential
Tested recovery process	Recommended	Essential

The goal is not to make infection mathematically impossible.

It is to reduce the chance of infection, detect problems earlier, limit how far they spread and recover safely when prevention fails.

Frequently Asked Questions About Malware

What is malware in simple words?

Malware is software intentionally designed to perform harmful or unauthorized actions on a computer, phone, network or other digital system. It can steal information, spy on activity, encrypt files, destroy data or give attackers remote access.

Is malware the same as a virus?

No. A virus is one type of malware. Other types include ransomware, worms, trojans, spyware, infostealers, rootkits and bot malware.

How does malware usually spread?

Common routes include phishing, malicious attachments, fake downloads, pirated software, compromised websites, malicious advertising, unpatched vulnerabilities, stolen credentials, removable media and supply-chain compromise.

Can malware infect a phone?

Yes. Mobile devices can be affected by malicious or compromised applications and other attacks. Users should install apps from trusted sources, keep the operating system updated and review application permissions carefully.

Can malware steal passwords?

Yes. Infostealers, spyware and keyloggers can steal passwords and other authentication information. Modern malware may also target cookies and session tokens.

Does resetting a password remove malware?

No.

Changing a password protects the account, while removing the infection protects the device. If credential-stealing malware is suspected, both steps may be necessary.

Can antivirus detect every malware infection?

No security product can guarantee detection of every malicious program. Modern cybersecurity combines endpoint protection with updates, MFA, backups, restricted permissions, monitoring and safe user behavior.

Should I pay a ransomware demand?

The FBI does not encourage paying ransom because payment does not guarantee that data will be restored and can encourage continued criminal activity. Organizations facing ransomware should contact appropriate incident-response professionals and relevant authorities.

Can malware survive after I delete the suspicious file?

Potentially.

Some malicious programs install additional components, create persistence or modify the system. Serious infections may require professional investigation or rebuilding the device from a trusted image.

What should I do first if I detect malware?

For a serious active infection, isolate the affected device from the network, notify the appropriate IT/security team if it is an organizational device, preserve relevant evidence and begin remediation using trusted security procedures.

Conclusion

Malware has changed significantly from the era when computer security mostly meant worrying about traditional viruses.

Modern malware is part of a much larger criminal ecosystem.

A trojan can disguise itself as useful software.

An infostealer can quietly steal browser passwords, cookies and session tokens.

A rootkit can help preserve hidden access.

A bot can turn an infected computer into criminal infrastructure.

Ransomware can encrypt systems after attackers have already spent days or weeks stealing information.

And increasingly, malware can enter through something users never personally clicked: an exploited software vulnerability.

That is why effective malware protection depends on more than antivirus.

Keep software patched.

Install applications from trusted sources.

Treat unexpected downloads and attachments carefully.

Protect important accounts with unique credentials and multifactor authentication.

Maintain tested backups.

Limit unnecessary privileges.

Monitor important systems.

And if an infection occurs, think beyond simply removing one suspicious file. Determine what credentials may have been stolen, what other systems may be affected and whether sensitive information left the environment.

Malware is one part of the wider cybersecurity problem.

For the complete framework covering ransomware, phishing, account security, data breaches, cloud security, AI threats, backups, incident response and cyber resilience, continue with The News Ink’s main Cybersecurity Explained: Complete Guide.

Follow The News Ink

Stay connected with The News Ink for cybersecurity, artificial intelligence, technology, business, world news and major digital developments.

Follow The News Ink on X, Instagram and Threads.

Join The News Ink WhatsApp Channel for updates, and follow The News Ink on Medium for longer explainers and analysis.