Malware that is unintentionally downloaded and executed on a device. For example malicious JavaScript that runs as part of a website.
Web browsers are the main point of entry, javascript is most commonly used, installed exploitable plugins are used to escape from the isolation of the javascript engine.
malware is almost always highly [[Obfuscation|obfuscated]] to reduce ease of detection.