What is a common example of malware that can gather information about a user without their consent?

Spyware is a type of malware specifically designed to collect information about a user without their consent. It operates by secretly monitoring user activities, often capturing sensitive data such as usernames, passwords, browsing habits, and financial information. This data is then typically sent back to a third party, who can misuse it for various malicious purposes, such as identity theft or unauthorized access to personal accounts.

In contrast, other types of malware serve different functions. Worms are designed to replicate themselves and spread across networks, often causing damage by consuming bandwidth or corrupting systems. Trojans disguise themselves as legitimate software but primarily act as a gateway for other malicious activities, such as installing additional malware. A botnet refers to a network of infected computers that can be controlled remotely, often used to launch distributed denial-of-service attacks rather than specifically gathering user information.

Thus, the specific goal of spyware to clandestinely collect personal data without user consent makes it the most applicable answer in this context.