The software collects personally identifiable information about
a human user or the user's activities, but the software accesses this
information using other resources besides itself, and it does not require that
user's explicit approval or direct input into the
software.
Extended Description
"Spyware" is a commonly used term with many definitions and
interpretations. In general, it is meant to software that collects
information or installs functionality that human users might not allow if
they were fully aware of the actions being taken by the software. For
example, a user might expect that tax software would collect a social
security number and include it when filing a tax return, but that same user
would not expect gaming software to obtain the social security number from
that tax software's data.
Time of Introduction
Architecture and Design
Implementation
Operation
Potential Mitigations
Phase
Description
Use spyware detection and removal software.
Always verify the integrity of the software that is being
installed.