# What is Spyware?

> Spyware is software that covertly collects information about a person, organization, device, or activity without adequate knowledge or permission and makes that information available to another party.

- Canonical URL: https://yellowcube.eu/glossary/spyware/
- Publisher: Yellow Cube
- Language: en
- Contact: hello@yellowcube.eu

## Content

It may capture credentials, keystrokes, messages, screens, location, browsing, files, audio, or device details. Covert monitoring and the resulting privacy or security violation are its defining features.

Spyware may be hidden in another application, exploit a vulnerability, abuse accessibility or administrative permissions, or be installed through physical access. It can store data locally or transmit it. The same specimen may also be a keylogger, information stealer, stalkerware, or Trojan horse.

### Key points

- **Access and collection:** Determine how the software was installed, which permissions it holds, what sensors and data it can reach, when collection began, and where information was stored or sent.
- **Detection:** Review application provenance, permissions, persistence, device-management state, unusual data access, network destinations, and discrepancies between the visible interface and observed behavior.
- **Response:** Consider account and credential exposure as well as the device, preserve necessary evidence, remove unauthorized access safely, and assess recipients and onward use of collected information.
- **Important limitation:** Monitoring software is not automatically spyware, but authorization by a device owner or employer does not by itself make monitoring lawful, proportionate, or adequately disclosed. In interpersonal-abuse cases, removal may alert the operator or destroy evidence, so personal safety should guide action.

### Related terms

[Malware](<https://yellowcube.eu/glossary/malware/>) · [Keylogger](<https://yellowcube.eu/glossary/keylogger/>) · [Data exfiltration](<https://yellowcube.eu/glossary/data-exfiltration/>) · [Identity theft](<https://yellowcube.eu/glossary/identity-theft/>) · [Data privacy](<https://yellowcube.eu/glossary/data-privacy/>) · [Infostealer](<https://yellowcube.eu/glossary/infostealer/>)

### Sources

[NIST glossary: Spyware](https://csrc.nist.gov/glossary/term/spyware) · [Australian Signals Directorate and partners: BADBAZAAR and MOONSHINE spyware advisory](https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/badbazaar-and-moonshine-technical-analysis-and-mitigations) · [FTC: Stalkerware—What To Know](https://consumer.ftc.gov/articles/stalkerware-what-know)

## Attribution and scope

This Markdown representation is generated from the same approved content records as the canonical HTML page. Cite the canonical URL above when referencing this material. Product and service descriptions are informational; confirm project-specific requirements with Yellow Cube.

