Spyware
Spyware is a type of malware that hides on your device and secretly watches what you do.
It can track the websites you visit, record what you type, capture your passwords, and even turn on your camera or microphone. Spyware often sneaks in through free software downloads or deceptive links, and you might not know it's there until the damage is done.
Spyware, explained at three levels
At home
Spyware is sneaky software that hides on your computer or phone and watches everything you do without your knowledge. It can see your passwords, read your messages, and track which websites you visit. Keeping your software updated and only downloading apps from trusted sources helps keep spyware off your devices.
At work
In a business context, spyware can compromise sensitive company data by capturing employee keystrokes, screenshots, or credentials. It often enters through phishing attacks or bundled software. Organizations use endpoint protection, network monitoring, and strict software installation policies to detect and prevent spyware infections.
At home
Spyware operates by running quietly in the background, often disguised as a system process. Keyloggers record everything you type, screen capture spyware takes periodic screenshots, and more advanced variants can access your webcam or microphone. Regular security scans and monitoring your device's behaviour for unusual activity help detect it.
At work
Professional spyware defence involves deploying endpoint detection and response tools that can identify suspicious behaviours like unauthorized screen captures or data exfiltration. Security teams also monitor network traffic for unusual outbound connections that might indicate a device is sending stolen data to an external server.
At home
Advanced users recognize that commercial spyware (sometimes marketed as parental monitoring or employee tracking software) occupies a grey area. Some sophisticated spyware like Pegasus can compromise devices with zero-click exploits. Keeping devices updated, rebooting regularly, and monitoring for unusual battery drain or data usage are practical defences.
At work
At the enterprise level, spyware defence involves threat intelligence about advanced persistent threats, monitoring for indicators of compromise associated with known spyware families, and implementing mobile device management policies. Advanced spyware analysis requires reverse engineering to understand command-and-control communication and data exfiltration methods.
Real-world examples
At home
Fatima noticed her phone's battery was draining unusually fast and found a suspicious app she didn't remember installing. A security scan revealed it was spyware that had been logging her keystrokes and capturing screenshots, likely installed through a link she'd clicked in a text message.
At work
Marcus, a cybersecurity analyst at an accounting firm, detected unusual outbound network traffic from an executive's laptop. Investigation revealed spyware that had been recording keystrokes for weeks, capturing client financial data. The spyware had arrived through a trojanized software update.
Common confusions
- A lot of people believe spyware is just about tracking browsing habits. Advanced spyware can record keystrokes, capture passwords, and even access your camera.
- Many people assume only sketchy websites install spyware. Spyware can come bundled with seemingly legitimate free software.
- Some people are convinced that spyware and adware are the same thing. While both are unwanted, spyware specifically focuses on secretly collecting data rather than showing ads.
For analysts
Business analysts should consider spyware threats when defining requirements for projects involving sensitive data or mobile devices. Requirements for endpoint protection, data loss prevention, and mobile device management policies help reduce spyware risk. Understanding spyware capabilities also informs privacy impact assessments.
History & origin
The term spyware first appeared in the mid-1990s and came into common use around 2000, though surveillance software existed earlier. Spyware bundled with free software became widespread in the early 2000s. Today, spyware ranges from low-level adware trackers to sophisticated government-grade surveillance tools.