typically is focused on replication and distribution, rather than on direct damage and destruction. It is designed to exploit a specific vulnerability in a system $($operating system, protocol, service, or application$)$ and then use that flaw to spread themselves to other systems with the same flaw. Countermeasures for it is the same as for virus, with the addition of keeping systems patched.