Implementing content filtering and intrusion detection/intrusion prevention systems at the Internet ingress/egress as well as disabling system administration rights on user workstations are strategies that can be used for preventing users from:

a. downloading and installing unauthorized applications and software onto organization-owned IT assets.
b. inserting CDs, DVDs, and USB drives with personal data onto organization-owned IT assets.
c. accessing the Internet and surfing the Web.
d. clicking on unknown e-mail attachments and files.

Yeah they want to steal your info and sell it on the dark web. they want your credit/debit card numbers, social security numbers, google passwords, and other stuff. some people install spyware onto your device, which, as the word suggests, is built to spy on your every move, such as what you type. they then sell this information to other people secretly or use it for evil purposes themselves. or both, idk. the reason why this info costs money to learn is because its valuable info. im not saying that i condone it though! hacking sucks, and whoever is involved in it is just a horrible person.

Answerservice layer;