spyware scandal