# Commercial Spyware **Domain:** Cybersecurity / Surveillance / Commercial Technology **Doc Type:** Canonical Technical-Policy Node **Maturity:** Developed ## Definition Under [[wiki/Executive Order 14093|Executive Order 14093]], **commercial spyware** is an end-to-end software suite furnished commercially that can obtain remote access to a computer without the consent of its user, administrator or owner in order to collect content, record audio or video, or track location. ## Risk Context Commercial spyware can support legitimate authorized functions, but its proliferation creates risks of unauthorized surveillance, repression, human-rights abuse and counterintelligence compromise. ## Sources / Provenance - [Executive Order 14093 — Federal Register](https://www.federalregister.gov/documents/2023/03/30/2023-06730/prohibition-on-use-by-the-united-states-government-of-commercial-spyware-that-poses-risks-to) - [Treasury sanctions Intellexa-associated entities](https://home.treasury.gov/news/press-releases/jy2155) ## See Also [[wiki/Pegasus Spyware|Pegasus Spyware]], [[wiki/Surveillance|Surveillance]], [[wiki/Highly Targeted Individuals|Highly Targeted Individuals]]