A string of characters in the payload of a network message that indicate that the message contains malicious content, such as a virus, Trojan horse, or other intrusion activity.