the action carried out by malware code is referred to as a(n)

The action carried out by malware code is referred to as a payload.
It is term used in computer security to denote what a virus, worm or Trojan is doe on a victim's computer. The actions can be damage to data, theft of confidential information and damage to computer-based systems or processes..

Would it be data software?