Cross-platform malware is malicious code built to run on more than one operating system, such as Windows, macOS, and Linux. Attackers may share one codebase and add small platform-specific modules so the same campaign can reach many victims without rewriting the payload for each environment.
This matters because modern organizations rarely use a single OS. A cross-platform payload can spread through mixed developer laptops, servers, and virtual machines, increasing the chance that one delivery method works broadly. In a repository-based attack, for example, the same malicious logic may be designed to execute when a developer opens or uses project files, regardless of the host system.
Defenders should assume that “works everywhere” is a threat multiplier. Good controls include script inspection, least-privilege execution, endpoint detection across all major platforms, and blocking unexpected interpreters or auto-run behavior. Cross-platform malware often relies less on a deep exploit and more on portability and trust.