A user came into the office to issue a simple database request and found pop$-$ups of multiple ads all at once. It seems the malicious software $($or malware$)$ has been installed on the company. The malware is considered to be which of the following in this case?

a$.$ A security vulnerability

b$.$ A compliance violation

c$.$ A security threat

d$.$ A security measure