Subtype: Advertising Spyware

Definition:
1.) Software designed to monitor a person's computer activity surreptitiously and which transmits that information over the internet.

2.) Also might be referred to as a "data miner".

3.) When used incorrectly, the term may refer to software which alters browser and/or security settings, is installed without proper notification or displays advertising without actually monitoring the user.

Origin:
The term "spyware", as applied to advertisement-serving software, is believed to have been coined by Steve Gibson of GRC.com

Description:
Advertising spyware will monitor the surfing and/or searching activity of any person using the machine on which it is installed. That information is transmitted over the internet, usually to the company responsible for creating the software. The information is stored in a database, usually for marketing purposes. Information from this database might be sold to third parties. The software usually will display advertisements thought to be relevant to the interests of the person(s) using the infected computer.

Spyware can be installed in numerous ways. The most common method is bundling. That is when the spyware company pays a software publisher to include the spyware in their products. Another common method is to exploit security flaws in popular web browsers to install the software.

Typically, a unique tracking number is assigned to each installation of the spyware. This tracking number, as well as information about how the infected computer is being used, is transmitted to the company responsible for creating the spyware. This allows that company to maintain a database on the activities of the users whose computers are infected by their spyware.

Advertisements may be displayed which are related closely to the topics about which the users are reading or for which they are searching. These advertisements most commonly appear as pop-up windows or banner ads that are embedded into an unrelated program.

For the term "advertising spyware" to apply properly, a piece of software must transmit information about the activities of the users of the infected computer without their knowledge. It is not necessary for the software to display advertisements in order to be labeled as "spyware" or "advertising spyware". The fact that the information is collected for marketing purposes distinguishes it from "surveillance spyware".

Example:
Blackstone Transponder was a program which monitored the addresses of web sites visited and information entered into web site forms. The information is believed to have been sold to various other parties. The software would pop up advertising windows tailored to the computer user(s).

Subtype: Surveillance Spyware

Definition:
Software or Hardware device designed to monitor a person's activities, typically without that person's knowledge.

Origin:
Unknown

Description:
Software spyware can record keystrokes, log electronic chat conversations and log the contents of emails. Some spyware will take periodic screenshots of what is being displayed on the computer monitor. Software spyware can be used to monitor communications sent to and from the computer, to steal passwords and monitor other computer activities.

A small hardware device can be attached between the computer and the keyboard to record which buttons are being pushed on the computer. This is an effective way of stealing passwords and is undetectable by software antispyware products. Other examples of hardware spyware include small cameras and microphones that are hard to spot or radio transmitters that can be attached to vehicles or clothing.

Example:
eBlaster is software spyware which monitors email, chat sessions, keystrokes, programs being run, file sharing activity and user logon and logoff. The logs of these activities can be sent by email to any address specified by the person who installs the software. eBlaster makes credible attempts to hide its activity from any person using the computer, although many antispyware programs can detect it.

Keycatcher is a small hardware device which plugs into the port used by a computer's keyboard. The keyboard then is plugged into the Keycatcher device. All buttons pressed on the keyboard are recorded into flash memory and can be retrieved at a later time. Keycatcher cannot be detected by antispyware programs but can be spotted very easily if someone looks at the back of the computer.

Copyright Notice and Terms of Use:

This work is copyrighted © 2005 by Mike Healan. All rights reserved.

No person or organization may cite or refer to this definition of "spyware" or "advertising spyware" during a legal hearing or other legal proceeding, without the explicit and written permission of the copyright owner while the copyright is in force.

No person or organization may cite or refer to this definition of "spyware" or "advertising spyware" in any communication with any party which disputes the labeling of their software as "spyware" or "advertising spyware", without the explicit and written permission of the copyright owner while the copyright is in force.

Report infringement of this copyrighted work