Spyware is a type of program that secretly uses a computer’s internet connection to send demographic, browsing, and other usage information to advertising or marketing firms. More broadly, “spyware” can refer to any application which surreptitiously installs itself on a computer and performs any number of actions without the user’s knowledge. For the reasons enumerated above , spyware and adware are often spoken of in the same breath because very adware often has a hidden spyware module attached to it. Though advertisers claim that all information transmitted is anonymous, the opportunity for violations of privacy is clearly evident.

It does not require much imagination to understand why programmers willingly add adware and spyware to their creations – without doing so, they would not be paid. But what’s in it for the person paying the programmers? In other words, why was spyware created in the first place? That’s an easy question to answer: money. It allows advertisers and marketing companies to monitor a user’s online behaviors and proclivities, and then target advertising towards that individual, either through email or pop-up advertising.

All adware is not so insidious, but the vast majority is. If the problem were simply a matter of a few pop-up ads every now and then, the issue would barely rise to the level of a nuisance. But the threat to privacy occurs with the unauthorized flow of information from an infected computer. When push comes to shove, these marketing and advertising companies point to “strict” guidelines regarding the type of information gathered, as well as the “guarantee” of privacy. It is fair to note that they are compelled to gather such information in secret, providing users zero say over what kinds of information flows from their computer, both of which speak volumes about these assurances.

Like worms, spyware acts as an independent piece of executable programming. That means is it can act just as any other computer program does. Whatever a programmer wants the program to do, it can do it. Whatever information the programmer wants, he or she can have, be it keystrokes, hard drive scans, instant messaging, email communications, browser settings, cookies… whatever! All of this information can be sent to an unknown third party, then possibly sold to the highest bidder. There are no restrictions on the information they can steal.