svarthatt

Svarthatt, or black hat, is a term used in information security to describe individuals who engage in illicit hacking activities. It designates actors who violate laws, breach computer systems, or exploit vulnerabilities for personal gain, damage, or disruption. The term is commonly contrasted with white hat hackers, who test and improve security with authorization, and grey hat hackers, whose actions may be unauthorized but not always malicious.

The expression originates from the stereotype in Western cinema that villains wear black hats, a metaphor carried over into cybersecurity to distinguish malicious from ethical behavior. In everyday language, svarthatt is used to categorize hacking behaviors rather than to identify a specific legal role or profession.

Typical svarthatt activities include unauthorized access to systems, data theft or leakage, distribution of malware, ransomware deployment, botnet operation, fraud, and cyber espionage. Motivations can range from financial gain and competitive advantage to political influence, sabotage, or personal challenge. Methods are described at a high level and may involve social engineering, phishing, exploiting software vulnerabilities (including zero-days), and the development or deployment of malware.

Legality and ethics form a key aspect of the concept. In most jurisdictions, svarthatt activity is illegal and can lead to criminal charges, civil liability, and long-term reputational harm. Privacy and organizational security implications are central concerns for both defenders and policymakers.

Related terms include grey hat and white hat, as well as the Black Hat conference series, an international set of security training and briefing events focusing on research and vulnerability disclosure.