Types of Spyware

There are several different types of spyware, such as adware, stalkerware and keyloggers. No matter what kind of spyware is installed on your device, it is frightening to have your privacy invaded and sensitive information stolen by cybercriminals.

Read more to learn what spyware is, the different types of spyware and how to protect your devices from spyware.

What is spyware?

Spyware is a type of malware that can be secretly installed on your device to spy on you. Malware is software that can infect your device after you accidentally click on a link in a phishing email, download free content from third-party sources or enter login credentials on a spoofed website. After spyware is installed on your device, the cybercriminal who created the spyware can access your personal information and even spy on you through your camera or microphone. They might use your private data to gain access to your accounts or sell it on the dark web so other cybercriminals can commit fraud or identity theft.

The different types of spyware

Now that you know what spyware is, let’s learn the seven most common types of spyware that you may encounter in the media or your own life.

Adware

Also known as advertising-supported software, adware is a type of spyware that appears as unwanted pop-ups or advertisements on your device. Adware is different from malvertising because adware is the program that gets installed on your device while malvertising is the act of cybercriminals using ads to spread malware. From pop-ups congratulating you on winning a too-good-to-be-true prize to advertisements for apps you are encouraged to download, adware can appear on your device in a variety of clever ways.

Sometimes, adware can be customized to your personal preferences if it tracks your online activity. For example, if you frequently shop online for trendy clothes, adware on your device might appear as a pop-up claiming you’ve won $500 worth of new clothes. However, clicking on any adware will most likely take you to an unsafe and illegitimate website, start infecting your device with malware or install programs to steal your device’s data.

Stalkerware

As the name suggests, stalkerware’s main purpose as a type of spyware is to monitor what you are doing on your device. Typically, stalkerware is installed on a device to access not only what you do through keystrokes but also your device’s camera and microphone. Some stalkerware is installed and disguised as another app, so you will not suspect that your device usage is being tracked. Stalkerware can take screenshots of what you do on your device, making it a very invasive form of cyberstalking.

Government-grade spyware

Some spyware is created to fight crime, but its powers end up being used with malicious intentions. Government-grade spyware, like Pegasus, was intended to secretly reside on mobile devices to combat terrorism and crime. However, it is often misused to spy on anyone with confidential information, including journalists, politicians and lawyers. Using government-grade spyware, cybercriminals can eavesdrop on phone calls, read text messages, track locations and collect private data. After government-grade spyware is installed on a device, there is little to no chance that you will realize you are being monitored.

Trojans

Like the classic story of the Trojan Horse, Trojan spyware tricks you into installing malware onto your device by impersonating legitimate software or files. Once you’ve installed Trojans, they can access your systems and devices to spy on you or steal your private data. Although the main purpose of Trojans sounds similar to viruses, Trojans are actually malware that comes in the form of unsolicited email attachments, malicious files or spoofed websites.

Rootkit

A rootkit is a type of spyware that gives cybercriminals the ability to steal data, install malware and spy on you through your device. What is especially concerning about this type of spyware is that, if installed, a cybercriminal can have consistent access remotely to a device. A rootkit generally disguises itself as a normal file and can be overlooked by antivirus software. One of the main purposes of a rootkit as spyware is for a cybercriminal to steal Personally Identifiable Information (PII) from a device and gain control of privileged areas of a system. If a rootkit is installed on an employee’s computer, a cybercriminal can gain access to confidential information and potentially customer data, which could jeopardize the reputation and success of a company.

Keyloggers

To understand what keyloggers are, you first have to understand entry points. Keyloggers are downloaded onto a device through entry points, which include emails, files and software. Once keyloggers are installed on your device through an entry point, they capture every keystroke to gather your login credentials and other private information. Keyloggers monitor keystroke patterns by accurately and discreetly recording keyboard activity, making it difficult for you to realize you are being spied on.

Browser hijackers

Targeting your internet browser and browsing experience, a browser hijacker is a type of spyware that redirects you to illegitimate websites for the financial gain of a cybercriminal. This malware also can be used to access your personal information and spy on your browsing activity. For a browser hijacker to be downloaded onto your device, you may have installed an app from a third-party source, clicked on an unsolicited link or downloaded an infected email attachment. Browser hijackers can alter your internet browser’s settings, making your search engine, default home page and security settings different from how you originally set them up.

Since your browser might contain saved passwords or credit card information, browser hijackers can give cybercriminals access to your online accounts and financial information. This is one of the main reasons why saving your passwords in a built-in browser password manager is unsafe; a cybercriminal who accesses your browser also has access to your passwords.

How to protect your devices from spyware

Although spyware can incite panic and fear once you realize it’s on your device, there are several things you can do to protect yourself and your devices before it’s too late.

Don’t click on unsolicited links or attachments

If you receive an unsolicited message containing links or attachments, make sure not to click on them. Cybercriminals will send you emails or texts, pretending to be a legitimate company or person you trust to trick you into clicking a link or downloading a file. Most of these unsolicited messages will be in the form of emails as phishing attacks, but some may also be over texts as smishing attacks.

You can safely check if a link is safe by hovering your mouse over the link to preview the URL. If the email says the link will take you to one place, but the preview of the URL shows that the website is for a completely different place, do not click on the link. You can also copy and paste the link into a URL checker, like Google Transparency Report, which will tell you if a link is legitimate.

Check if an email attachment is safe by looking at the sender’s email address and name. Double-check that the person who sent you a suspicious attachment is from a legitimate company by contacting the sender another way, such as by emailing the company’s support team directly.

Only download from trusted sources

Protect your devices from spyware by downloading files, apps or software only from trusted sources. A trusted source is any official website or app store – for iPhone users, the App Store is considered trustworthy. Make sure you don’t download anything from a third-party website because apps or software not approved by official and trustworthy sources risk containing malware, which could infect your device and steal your data.

Use a password manager

Using a password manager like Keeper^® is one of the best ways to protect your devices from spyware because of its variety of features. A password manager keeps your login credentials safe, thereby protecting your online data. It helps you generate strong passwords, stores your information and lets you share your records securely.

Password managers can autofill your login credentials on their associated websites to protect you from malicious links and keyloggers. For example, if you have an online account with Amazon and receive an unsolicited link from Amazon but your login credentials do not autofill, this is a sign that the website you’ve clicked on is not really from the official company.

Having a designated password manager rather than relying on a password manager built into your browser ensures that your information stays secure. If your browser is hacked, a cybercriminal could gain access to all your login credentials and accounts. Keeping your login credentials in a password manager will keep your account information safe because only you will be able to access your private information.

Install an antivirus software

Antivirus software can be installed on your device to detect, stop and remove viruses and malware before they infect it. The software continuously scans your device for viruses and malware by comparing your device’s code with a large database of known viruses. If the antivirus software finds a match, it will delete the virus or malware before it infects your device. Protecting yourself from spyware with antivirus software is important because some spyware can be detected by antivirus software. If antivirus software catches spyware before it infects your device, you will be safe from its attempts at stealing your data.

Download a pop-up blocker

To prevent adware or malware-filled pop-ups from damaging your device, you should download a pop-up blocker. Pop-up blockers let you browse the internet without being interrupted by pop-ups and minimize the risk of pop-up viruses appearing on your device. Since adware appears as unwanted pop-ups during your browsing experience, downloading a pop-up blocker will prevent these ads from infiltrating your device.

Stay protected against spyware

While spyware may seem like a rare and uncommon occurrence, you never know if you might become a target. It’s best to stay protected against malware by avoiding unsolicited links or attachments, downloading only from trustworthy sources, installing antivirus software and using a password manager.

Start a free 30-day trial of Keeper Password Manager to experience a designated and secure location for your login credentials and important information.