LogiCL |
---|
Services Informatiques |
LogiCL IT Services
Spy Software
Spyware (spy software)
Spyware is software that aids in gathering information about a person or organization without their
knowledge and that may send such information to another entity without the consumer's consent, or that
asserts control over a computer without the consumer's knowledge
"Spyware" is mostly classified into four types: system monitors, trojans, adware, and tracking cookies.
Spyware is mostly used for the purposes such as; tracking and storing internet users' movements on the web;
serving up pop-up ads to internet users.
Whenever spyware is used for malicious purposes, its presence is typically hidden from the user and can be
difficult to detect. Some spyware, such as keyloggers, may be installed by the owner of a shared, corporate,
or public computer intentionally in order to monitor users.
While the term spyware suggests software that monitors a user's computing, the functions of spyware can
extend beyond simple monitoring. Spyware can collect almost any type of data, including personal
information like Internet surfing habits, user logins, and bank or credit account information. Spyware can
also interfere with user control of a computer by installing additional software or redirecting Web
browsers. Some spyware can change computer settings, which can result in slow Internet connection
speeds, un-authorized changes in browser settings, or changes to software settings.
Sometimes, spyware is included along with genuine software, and may come from an malicious website. In
response to the emergence of spyware, a small industry has sprung up dealing in anti-spyware software.
Running anti-spyware software has become a widely recognized element of computer security practices for
computers, especially those running Microsoft Windows. A number of jurisdictions have passed anti-
spyware laws, which usually target any software that is surreptitiously installed to control a user's
computer.
Routes of infection
Spyware does not necessarily spread in the same way as a virus or worm because infected systems
generally do not attempt to transmit or copy the software to other computers. Instead, spyware installs itself
on a system by deceiving the user or by exploiting software vulnerabilities.
Most spyware is installed without users' knowledge, or by using deceptive tactics. Spyware may try to
deceive users by bundling itself with desirable software. Other common tactics are using a Trojan horse.
Some spyware authors infect a system through security holes in the Web browser or in other software. When
the user navigates to a Web page controlled by the spyware author, the page contains code which attacks the
browser and forces the download and installation of spyware.
The installation of spyware frequently involves Internet Explorer. Its popularity and history of security
issues have made it a frequent target. Its deep integration with the Windows environment make it susceptible
to attack into the Windows operating system. Internet Explorer also serves as a point of attachment for
spyware in the form of Browser Helper Objects, which modify the browser's behavior to add toolbars or to
redirect traffic.
Security practices
To detect spyware, computer users have found several practices useful in addition to installing anti-
spyware programs. Many users have installed a web browser other than Internet Explorer, such as Google
Chrome or Mozilla Firefox. Though no browser is completely safe, Internet Explorer is at a greater risk for
spyware infection due to its large user base as well as vulnerabilities such as ActiveX.
Individual users can also install firewalls from a variety of companies. These monitor the flow of
information going to and from a networked computer and provide protection against spyware and malware.
Some users install a large hosts file which prevents the user's computer from connecting to known spyware-
related web addresses. Spyware may get installed via certain shareware programs offered for download.
Downloading programs only from reputable sources can provide some protection from this source of attack.
From Wikipedia, the free encyclopedia.