Spyware

Spyware is a type of malware that secretly monitors and collects information about a user's activities without their knowledge or consent. Spyware can record keystrokes (keyloggers), capture screenshots, monitor web browsing, access webcams and microphones, and exfiltrate collected data to attackers.

For defense contractors, spyware poses a particularly severe threat because it can capture CUI as it's being viewed, typed, or discussed. Spyware can be installed through phishing, drive-by downloads, or bundled with seemingly legitimate software.

Why It Matters

Spyware can silently capture CUI even from systems with strong access controls. Endpoint protection solutions that detect behavioral indicators of spyware — not just known signatures — are essential for protecting sensitive defense information.