Malicious software that gather and exfiltrates data from a device without the user’s knowledge or permission.