A drive-by download is any download that occurs without the user's consent or knowledge. It also refers to unintended downloads that a user agrees to download without understanding the outcome or consequences. Drive-by downloads are highways used by cybercriminals to deliver malware payloads that exploit vulnerabilities in a given system. Drive-by downloads can occur on websites or in bundleware.