Get the latest tech news
PcTattletale leaks victims' screen recordings to entire Internet
Eric Daigle' personal website
Rather than the sophisticated monitoring of many similarly insecure competitors it simply asks for permission to record the targeted device (Android and Windows are supported) on infection. Unfortunately, PCTattletale have ignored Zack and I's attempts at contacting them to fix the issue, so I can't give any more details here to avoid encouraging abuse of the vulnerability. Together with the login and token code, this yields a simple exploit script That downloads the most recent screen capture from every device within the chosen range of IDs.
Or read this on Hacker News
