Spyware secretly collects information about what you do. It logs keystrokes, captures screenshots, records browsing history, and reads messages. Some spyware tracks location. Some turns on the microphone or camera. The data goes to the attacker, who sells it, uses it for blackmail, or leverages it for further attacks. Spyware is designed to be invisible. You are not supposed to know it is there.

Commercial spyware is a growing problem. Pegasus, built by NSO Group, infects phones without any user interaction. It targets journalists, activists, and politicians. Governments buy it to surveil their critics. The spyware can read encrypted messages, track location, and access the camera and microphone. Apple and Google have patched some of the vulnerabilities Pegasus used, but the cat-and-mouse game continues. Consumer spyware is more mundane. Stalkerware apps let someone monitor a partner's phone. Adware tracks browsing to serve targeted ads. Keyloggers capture credentials. Detection is difficult. Spyware hides in legitimate-looking processes. It may use rootkit techniques to avoid removal. On mobile devices, it often requires no user action to install. Defense is limited. Keep devices patched. Watch for unusual battery drain or data usage. Use mobile security tools where available. The best defense is not being a target, which is not a choice most people can make.

Spyware capabilities

• Keystroke logging — capture everything typed
• Screen capture — take screenshots at intervals
• Message interception — read texts and emails
• Location tracking — monitor where the device goes
• Camera and microphone — record audio and video

Spyware is surveillance. The only question is who is watching and why.