> (1) Malevolence = Deliberate info leaking. In this case, no matter where
you access, what the content or protocol is, the browser will do its thing.
Giving it a second thought, this can depend on how wisely a spyware is
written. A good spyware would be wise enough to stick its nose out *only* in
a "noisy crowd". For instance, it wouldn't call home if the browser is not
accessing a page with JS which makes outbound connections. The JS (and its
outbound connections) has nothing to do with the spyware or its home address.
A spyware can behave like this just to confuse the matter, so that you would
never know which address is which, and whether spy-home is accessed by JS or
by spyware.
There may be other examples of a spyware hiding behind complexity. So, it can
be rather difficult to catch an intelligent spyware. To catch sophisticated
spyware, a detailed strategy to outsmart them should be devised, which I
don't have currently.
To our relief, Mozzarella the cheesy borser is not that wise apparently, as
it bluntly goes out to various 3rd party sites no matter what (I hope they
are not lurking here). But who can say all the spyware out there are as dumb?