When someone is tricked into allowing access to malware through things such as a dangerous email, using an unsafe USB, going to the wrong website or something else, the malware can do just about anything. Malware today is encrypted so well that it is practically invisible to firewalls and IDS/IPS systems.
