#DataBreach at #stalkerware #SpyX affects close to 2 million, including thousands of #Apple users

https://techcrunch.com/2025/03/19/data-breach-at-stalkerware-spyx-affects-close-to-2-million-including-thousands-of-apple-users/

"A consumer-grade spyware operation called SpyX was hit by a data breach last year, TechCrunch has learned. The breach reveals that SpyX and two other related mobile apps had records on almost two million people at the time of the breach, including thousands of Apple users.

The data breach dates back to June 2024 but has not been previously reported, and there is no indication that SpyX’s operators ever notified its customers or those targeted by the spyware.

The SpyX family of mobile spyware is now, by our count, the 25th mobile surveillance operation since 2017 known to have experienced a data breach, or otherwise spilled or exposed their victims’ or users’ data, showing that the consumer-grade spyware industry continues to proliferate and put people’s private data at risk.

The breach also provides a rare look at how stalkerware like SpyX can also target Apple customers.

Troy Hunt, who runs data breach notification site Have I Been Pwned, received a copy of the breached data in the form of two text files, which contained 1.97 million unique account records with associated email addresses."

https://techcrunch.com/2025/03/19/data-breach-at-stalkerware-spyx-affects-close-to-2-million-including-thousands-of-apple-users/

#Amazon is still hosting #stalkerware victims' data weeks after breach alert
#Cocospy, #Spyic, and #Spyzie, have collectively compromised over 3.1 million Android phones, which we know because apps each had a #databreach in Feb.
As part of our investigation into stalkerware operations, which included analyzing the apps themselves, TechCrunch found that some of the contents of a device compromised by the stalkerware apps are being uploaded to storage servers run by #AWS.
https://techcrunch.com/2025/03/13/amazon-is-still-hosting-stalkerware-victims-data-weeks-after-breach-alert/

#Amazon is still hosting #stalkerware victims’ data weeks after breach alert

https://techcrunch.com/2025/03/13/amazon-is-still-hosting-stalkerware-victims-data-weeks-after-breach-alert/

Here’s Week 9 of the #Privacy Roundup:

- #Mozilla @mozillaofficial updates #Firefox privacy notice, adds Terms of Use
- Edge Canary disabling manifestv2 extensions
- DOGE allegedly exposing sensitive endpoints to the public internet
- More PII leaks by #stalkerware apps
- Surveillance tech in the office is very… invasive
- #Signal @signalapp threatens to cease operations in Sweden if e2e encryption is forced to be backfired by law

… and more, of course.

#privacymatters #cybersecurity #security

https://avoidthehack.com/privacy-week9-2025

A week in security (February 24 – March 2) https://www.malwarebytes.com/blog/news/2025/03/a-week-in-security-february-24-march-2 #stalkerware #PayPal #roblox #News

#Spyzie #stalkerware is spying on thousands of #Android and #iPhone users

https://techcrunch.com/2025/02/27/spyzie-stalkerware-spying-on-thousands-of-android-and-iphone-users/

Imagine someone having access to every message you send, every photo you take, and knowing exactly where you are at all times. This isn't science fiction - it's happening right now to thousands of people

https://techcrunch.com/2025/02/27/spyzie-stalkerware-spying-on-thousands-of-android-and-iphone-users/

Your #Android phone could have #stalkerware — here’s how to remove it

https://techcrunch.com/2025/02/20/remove-android-spyware/

A security vulnerability in a pair of phone-monitoring apps is exposing the personal data of millions of people who have the apps unwittingly installed on their devices, according to a security researcher who found the flaw.
#Stalkerware #Cocospy
https://techcrunch.com/2025/02/20/stalkerware-apps-cocospy-spyic-exposing-phone-data-of-millions-of-people/

Flaw found in stalkerware apps, exposing millions of people. Here’s how to find out if your phone is being spied upon – Source: www.bitdefender.com https://ciso2ciso.com/flaw-found-in-stalkerware-apps-exposing-millions-of-people-heres-how-to-find-out-if-your-phone-is-being-spied-upon-source-www-bitdefender-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #grahamcluleycom #Vulnerability #Grahamcluley #Stalkerware #Guestblog #Android #Malware #Spyware

Flaw found in stalkerware apps, exposing millions of people. Here’s how to find out if your phone is being spied upon https://www.bitdefender.com/en-us/blog/hotforsecurity/flaw-stalkerware-apps-exposing-people-heres-how-to-find-out-phone-spied #Vulnerability #vulnerability #stalkerware #Guestblog #Android #Malware #spyware

Security researcher details 2 bugs in “popular” spyware/stalkerware apps Cocospy and Spyic. 1) Exposes the personal data of millions of people who have the apps unwittingly installed on their devices. Data includes messages, photos, and call logs. 2) Exposes the email addresses of the people who signed up with the intention of planting the app on someone’s device to covertly monitor them.

Researchers collected > 2M million email addresses of the spyware’s customers. These mobile stalkerware apps share the same source code and are apparently linked to Chinese software developers.

https://techcrunch.com/2025/02/20/stalkerware-apps-cocospy-spyic-exposing-phone-data-of-millions-of-people/ #security #spyware #cybersecurity #systemservice #mobilephone #china #stalkerware #Cocospy #Spyic #privacy

Stalkerware apps Cocospy and Spyic are exposing phone data of millions of people | TechCrunch https://techcrunch.com/2025/02/20/stalkerware-apps-cocospy-spyic-exposing-phone-data-of-millions-of-people/ #stalkerware

Your #Android phone could have #stalkerware — here’s how to remove it

https://techcrunch.com/2025/02/20/remove-android-spyware/

Hacked, leaked, exposed: Why you should never use #stalkerware apps

https://techcrunch.com/2025/02/20/hacked-leaked-exposed-why-you-should-stop-using-stalkerware-apps/

#Stalkerware apps #Cocospy and #Spyic are exposing phone data of millions of people

https://techcrunch.com/2025/02/20/stalkerware-apps-cocospy-spyic-exposing-phone-data-of-millions-of-people/

9) I personally like using #Ungoogledchromium and #Librewolf as my browsers of choice if not using the Tor network. But my number one browser on all of my devices is Tor Browser.
10) Always set good #passwords on all your devices. Set the autolock feature to require a password each time your screen goes dark. Don’t give your password to anyone and if it is within your threat model scan your device for #stalkerware or other #malware. https://stopstalkerware.org/ 4/4