An Ethereum smart contract is a program stored on the Ethereum blockchain that can execute code and expose functions after deployment. Because it is published to the network, it is not hosted on a normal server and cannot be taken offline by simply shutting down a machine. Its rules and data are available for anyone to inspect, while its state persists across transactions.
This matters in cyber security because attackers can use smart contracts as a durable control or coordination point for malware. If a campaign uses a contract for command-and-control, defenders may find it harder to disrupt than a single domain or IP address. The contract can also act as a public rendezvous layer for fetching instructions or markers. For defenders, this shifts attention from only blocking network endpoints to monitoring on-chain activity, endpoint behavior, and suspicious token or session theft that may follow contract-driven malware operations.