A payload is malware that the threat actor aims to send to the victim in cybersecurity. If a cybercriminal sends an email with a malicious Macro attached and the recipient becomes infected with ransomware, the ransomware is the payload (and not the email or document).