The part of the packet, message, or code that carries the data. In information security, payload generally refers to the part of malicious code that performs the destructive operation.

Describes the activities, other than replication, that the malicious code performs. This could be any sort of behavior, such as an attempt to degrade network service or displaying a graphic on screen.