Spyware

Spyware is malicious software that secretly monitors a user's activity and collects information such as passwords, browsing habits, keystrokes or files, then sends it to a third party.

Spyware often hides inside free software, browser extensions, fake updates or email attachments. Some types record keystrokes to capture passwords, others take screenshots, steal saved browser credentials or session tokens, or track location on mobile devices. Information-stealing malware, sometimes called infostealers, has become a major source of credentials sold on criminal marketplaces.

For a small business, spyware on one computer can expose banking logins, Microsoft 365 sessions, client records and confidential pricing. Stolen session tokens can sometimes let attackers bypass passwords entirely. Because spyware is designed to stay quiet, there may be no obvious symptoms until accounts start being misused.

Practical tip: limit who can install software and browser extensions on work devices, keep endpoint protection active and avoid saving business passwords in web browsers. Use a password manager instead. If spyware is found, change passwords from a different, clean device and sign out all active sessions for affected accounts.