Get the latest tech news
Stalkerware apps Cocospy and Spyic are exposing phone data of millions of people
A bug in the Android and iPhone monitoring operations allows anyone to access private data exfiltrated from a victim's device.
The bug allows anyone to access the personal data — messages, photos, call logs, and more — exfiltrated from any phone or tablet compromised by Cocospy and Spyic, two differently branded mobile stalkerware apps that share largely the same source code. As such, TechCrunch is not publishing specific details of the vulnerability so as to not help bad actors exploit it and further expose the sensitive personal data of individuals whose devices have already been compromised by Cocospy and Spyic. Our traffic analysis found the app was sending our virtual device’s data via Cloudflare, a network security provider that obfuscates the true real-world location and web host of the spyware operations.
Or read this on TechCrunch
