---
type: "term"
title: "Spyware"
description: "Malware that covertly monitors user activity, collects data (keystrokes, browsing history, credentials), and transmits it to the attacker."
resource: "tlctc:term:spyware"
tags:
  - "glossary"
---
# Spyware

Malware that covertly monitors user activity, collects data (keystrokes, browsing history, credentials), and transmits it to the attacker. In TLCTC: maps to `#7 Malware` — foreign code executing via the system's designed execution capability. The data collection constitutes a Data Risk Event: `[DRE: C]` (Loss of Confidentiality). If collected credentials are subsequently used, an additional `#4 Identity Theft` step applies.

**Reference:** V1.9.1 Buzz-Word Refinement (#7)

See also: Malware (#7), Keylogger, Trojan