Self-propagation is a malware capability that lets an infection spread from the first compromised system to additional systems without needing a new manual attack each time. It may copy itself, reuse stolen credentials, exploit trust relationships, or trigger on connected hosts and shares. In ransomware and worms, this feature turns a single endpoint compromise into a wider network incident.
It matters because spread increases the blast radius: more devices can be encrypted, more accounts can be abused, and containment becomes harder. Defenders look for signs of lateral movement, unusual remote execution, and rapid appearance of the same payload across multiple hosts. Limiting self-propagation relies on strong segmentation, least-privilege access, timely patching, and fast isolation of infected machines. The goal is to make movement difficult, noisy, and easy to stop before the malware reaches other systems.