Hacked, Leaked, Exposed: Why You Should Never Use Stalkerware Apps
Stalkerware apps are notoriously creepy, unethical, and potentially illegal, putting users' data and loved ones at risk. These companies, often marketed to jealous partners, have seen multiple app makers lose huge amounts of sensitive data in recent years. At least 24 stalkerware companies have been hacked or leaked customer data online since 2017.
The sheer frequency of these breaches highlights a broader issue with the lack of security and accountability in the stalkerware industry, creating an environment where users' trust is exploited for malicious purposes.
As more victims come forward to share their stories, will there be sufficient regulatory action taken against these companies to prevent similar data exposures in the future?
A recent discovery has revealed that Spyzie, another stalkerware app similar to Cocospy and Spyic, is leaking sensitive data of millions of people without their knowledge or consent. The researcher behind the finding claims that exploiting these flaws is "quite simple" and that they haven't been addressed yet. This highlights the ongoing threat posed by spyware apps, which are often marketed as legitimate monitoring tools but operate in a grey zone.
The widespread availability of spyware apps underscores the need for greater regulation and awareness about mobile security, particularly among vulnerable populations such as children and the elderly.
What measures can be taken to prevent the proliferation of these types of malicious apps and protect users from further exploitation?
Google's security measures have been breached by fake spyware apps, which are hidden in plain sight on the Google Play Store. These malicious apps can cause immense damage to users' devices and personal data, including data theft, financial fraud, malware infections, ransomware attacks, and rootkit vulnerabilities. As a result, it is crucial for smartphone users to take precautions to spot these fake spyware apps and protect themselves from potential harm.
The lack of awareness about fake spyware apps among smartphone users underscores the need for better cybersecurity education, particularly among older generations who may be more susceptible to social engineering tactics.
Can Google's Play Store policies be improved to prevent similar breaches in the future, or will these types of malicious apps continue to evade detection?
Recently, news surfaced about stolen data containing billions of records, with 284 million unique email addresses affected. Infostealing software is behind a recent report about a massive data collection being sold on Telegram, with 23 billion entries containing 493 million unique pairs of email addresses and website domains. As summarized by Bleeping Computer, 284 million unique email addresses are affected overall.
A concerning trend in the digital age is the rise of data breaches, where hackers exploit vulnerabilities to steal sensitive information, raising questions about individual accountability and responsibility.
What measures can individuals take to protect themselves from infostealing malware, and how effective are current security protocols in preventing such incidents?
As recent news reminds us, malicious browser add-ons can start life as legit extensions. Reviewing what you’ve got installed is a smart move. Earlier this month, an alarm sounded—security researchers at GitLab Threat Intelligence discovered a handful of Chrome extensions adding code in order to commit fraud, with at least 3.2 million users affected. But the add-ons didn’t start as malicious. Instead, they launched as legitimate software, only to be later compromised or sold to bad actors.
The fact that these extensions were able to deceive millions of users for so long highlights the importance of staying vigilant when installing browser add-ons and regularly reviewing their permissions.
As more people rely on online services, the risk of malicious extensions spreading through user adoption becomes increasingly critical, making it essential for Google to continually improve its Chrome extension review process.
Zapier, a popular automation tool, has suffered a cyberattack that resulted in the loss of sensitive customer information. The company's Head of Security sent a breach notification letter to affected customers, stating that an unnamed threat actor accessed some customer data "inadvertently copied to the repositories" for debugging purposes. Zapier assures that the incident was isolated and did not affect any databases, infrastructure, or production systems.
This breach highlights the importance of robust security measures in place, particularly with regards to two-factor authentication (2FA) configurations, which can be vulnerable to exploitation.
As more businesses move online, how will companies like Zapier prioritize transparency and accountability in responding to data breaches, ensuring trust with their customers?
A broad overview of the four stages shows that nearly 1 million Windows devices were targeted by a sophisticated "malvertising" campaign, where malware was embedded in ads on popular streaming platforms. The malicious payload was hosted on platforms like GitHub and used Discord and Dropbox to spread, with infected devices losing login credentials, cryptocurrency, and other sensitive data. The attackers exploited browser files and cloud services like OneDrive to steal valuable information.
This massive "malvertising" spree highlights the vulnerability of online systems to targeted attacks, where even seemingly innocuous ads can be turned into malicious vectors.
What measures will tech companies and governments take to prevent such widespread exploitation in the future, and how can users better protect themselves against these types of attacks?
Microsoft's Threat Intelligence has identified a new tactic from Chinese threat actor Silk Typhoon towards targeting "common IT solutions" such as cloud applications and remote management tools in order to gain access to victim systems. The group has been observed attacking a wide range of sectors, including IT services and infrastructure, healthcare, legal services, defense, government agencies, and many more. By exploiting zero-day vulnerabilities in edge devices, Silk Typhoon has established itself as one of the Chinese threat actors with the "largest targeting footprints".
The use of cloud applications by businesses may inadvertently provide a backdoor for hackers like Silk Typhoon to gain access to sensitive data, highlighting the need for robust security measures.
What measures can be taken by governments and private organizations to protect their critical infrastructure from such sophisticated cyber threats?
Vishing attacks have skyrocketed, with CrowdStrike tracking at least six campaigns in which attackers pretended to be IT staffers to trick employees into sharing sensitive information. The security firm's 2025 Global Threat Report revealed a 442% increase in vishing attacks during the second half of 2024 compared to the first half. These attacks often use social engineering tactics, such as help desk social engineering and callback phishing, to gain remote access to computer systems.
As the number of vishing attacks continues to rise, it is essential for organizations to prioritize employee education and training on recognizing potential phishing attempts, as these attacks often rely on human psychology rather than technical vulnerabilities.
With the increasing sophistication of vishing tactics, what measures can individuals and organizations take to protect themselves from these types of attacks in the future, particularly as they become more prevalent in the digital landscape?
Amnesty International has uncovered evidence that a zero-day exploit sold by Cellebrite was used to compromise the phone of a Serbian student who had been critical of the government, highlighting a campaign of surveillance and repression. The organization's report sheds light on the pervasive use of spyware by authorities in Serbia, which has sparked international condemnation. The incident demonstrates how governments are exploiting vulnerabilities in devices to silence critics and undermine human rights.
The widespread sale of zero-day exploits like this one raises questions about corporate accountability and regulatory oversight in the tech industry.
How will governments balance their need for security with the risks posed by unchecked exploitation of vulnerabilities, potentially putting innocent lives at risk?
YouTube has issued a warning to its users about an ongoing phishing scam that uses an AI-generated video of its CEO, Neal Mohan, as bait. The scammers are using stolen accounts to broadcast cryptocurrency scams, and the company is urging users not to click on any suspicious links or share their credentials with unknown parties. YouTube has emphasized that it will never contact users privately or share information through a private video.
This phishing campaign highlights the vulnerability of social media platforms to deepfake technology, which can be used to create convincing but fake videos.
How will the rise of AI-generated content impact the responsibility of tech companies to protect their users from such scams?
Cybersecurity experts have successfully disrupted the BadBox 2.0 botnet, which had compromised over 500,000 low-cost Android devices by removing numerous malicious apps from the Play Store and sinkholing multiple communication domains. This malware, primarily affecting off-brand devices manufactured in mainland China, has been linked to various forms of cybercrime, including ad fraud and credential stuffing. Despite the disruption, the infected devices remain compromised, raising concerns about the broader implications for consumers using uncertified technology.
The incident highlights the vulnerabilities associated with low-cost tech products, suggesting a need for better regulatory measures and consumer awareness regarding device security.
What steps can consumers take to protect themselves from malware on low-cost devices, and should there be stricter regulations on the manufacturing of such products?
The modern-day cyber threat landscape has become increasingly crowded, with Advanced Persistent Threats (APTs) becoming a major concern for cybersecurity teams worldwide. Group-IB's recent research points to 2024 as a 'year of cybercriminal escalation', with a 10% rise in ransomware compared to the previous year, and a 22% rise in phishing attacks. The "Game-changing" role of AI is being used by both security teams and cybercriminals, but its maturity level is still not there yet.
This move signifies a growing trend in the beauty industry where founder-led companies are reclaiming control from outside investors, potentially setting a precedent for similar brands.
How will the dynamics of founder ownership impact the strategic direction and innovation within the beauty sector in the coming years?
Consumer Reports assessed the most leading voice cloning tools and found that four products did not have proper safeguards in place to prevent non-consensual cloning. The technology has many positive applications, but it can also be exploited for elaborate scams and fraud. To address these concerns, Consumer Reports recommends additional protections, such as unique scripts, watermarking AI-generated audio, and prohibiting audio containing scam phrases.
The current lack of regulation in the voice cloning industry may embolden malicious actors to use this technology for nefarious purposes.
How can policymakers balance the benefits of advanced technologies like voice cloning with the need to protect consumers from potential harm?
A recent study by Consumer Reports reveals that many widely used voice cloning tools do not implement adequate safeguards to prevent potential fraud and misuse. The analysis of products from six companies indicated that only two took meaningful steps to mitigate the risk of unauthorized voice cloning, with most relying on a simple user attestation for permissions. This lack of protective measures raises significant concerns about the potential for AI voice cloning technologies to facilitate impersonation scams if not properly regulated.
The findings highlight the urgent need for industry-wide standards and regulatory frameworks to ensure responsible use of voice cloning technologies, as their popularity continues to rise.
What specific measures should be implemented to protect individuals from the risks associated with voice cloning technologies in an increasingly digital world?
Amnesty International said that Google fixed previously unknown flaws in Android that allowed authorities to unlock phones using forensic tools. On Friday, Amnesty International published a report detailing a chain of three zero-day vulnerabilities developed by phone-unlocking company Cellebrite, which its researchers found after investigating the hack of a student protester’s phone in Serbia. The flaws were found in the core Linux USB kernel, meaning “the vulnerability is not limited to a particular device or vendor and could impact over a billion Android devices,” according to the report.
This highlights the ongoing struggle for individuals exercising their fundamental rights, particularly freedom of expression and peaceful assembly, who are vulnerable to government hacking due to unpatched vulnerabilities in widely used technologies.
What regulations or international standards would be needed to prevent governments from exploiting these types of vulnerabilities to further infringe on individual privacy and security?
Hackers are exploiting Microsoft Teams and other legitimate Windows tools to launch sophisticated attacks on corporate networks, employing social engineering tactics to gain access to remote desktop solutions. Once inside, they sideload flawed .DLL files that enable the installation of BackConnect, a remote access tool that allows persistent control over compromised devices. This emerging threat highlights the urgent need for businesses to enhance their cybersecurity measures, particularly through employee education and the implementation of multi-factor authentication.
The use of familiar tools for malicious purposes points to a concerning trend in cybersecurity, where attackers leverage trust in legitimate software to bypass traditional defenses, ultimately challenging the efficacy of current security protocols.
What innovative strategies can organizations adopt to combat the evolving tactics of cybercriminals in an increasingly digital workplace?
A recently discovered trio of vulnerabilities in VMware's virtual machine products can grant hackers unprecedented access to sensitive environments, putting entire networks at risk. If exploited, these vulnerabilities could allow a threat actor to escape the confines of one compromised virtual machine and access multiple customers' isolated environments, effectively breaking all security boundaries. The severity of this attack is compounded by the fact that VMware warned it has evidence suggesting the vulnerabilities are already being actively exploited in the wild.
The scope of this vulnerability highlights the need for robust security measures and swift patching processes to prevent such attacks from compromising sensitive data.
Can the VMware community, government agencies, and individual organizations respond effectively to mitigate the impact of these hyperjacking vulnerabilities before they can be fully exploited?
Zapier has disclosed a security incident where an unauthorized user gained access to its code repositories due to a 2FA misconfiguration, potentially exposing customer data. The breach resulted from an "unauthorized user" accessing certain "certain Zapier code repositories" and may have accessed customer information that had been "inadvertently copied" to the repositories for debugging purposes. The incident has raised concerns about the security of cloud-based platforms.
This incident highlights the importance of robust security measures, including regular audits and penetration testing, to prevent unauthorized access to sensitive data.
What measures can be taken by companies like Zapier to ensure that customer data is properly secured and protected from such breaches in the future?
The Vo1d botnet has infected over 1.6 million Android TVs, with its size fluctuating daily. The malware, designed as an anonymous proxy, redirects criminal traffic and blends it with legitimate consumer traffic. Researchers warn that Android TV users should check their installed apps, scan for suspicious activity, and perform a factory reset to clean up the device.
As more devices become connected to the internet, the potential for malicious botnets like Vo1d to spread rapidly increases, highlighting the need for robust cybersecurity measures in IoT ecosystems.
What can be done to prevent similar malware outbreaks in other areas of smart home technology, where the risks and vulnerabilities are often more pronounced?
Meta has fired "roughly 20" employees for leaking confidential company information, highlighting a growing trend of employee leaks that have compromised the security and integrity of internal data. The company has taken steps to address the issue, including conducting investigations and terminating employees who have leaked sensitive information. Despite efforts to curb leaks, Meta's recent actions suggest that the problem persists.
This incident highlights the complex relationship between employee motivation, corporate culture, and data security, suggesting that addressing these issues may require a more nuanced approach than simply firing those responsible.
What role do external pressures, such as government regulations and changing public expectations, play in shaping an organization's ability to safeguard sensitive information?
Modern web browsers offer several built-in settings that can significantly enhance data security and privacy while online. Key adjustments, such as enabling two-factor authentication, disabling the saving of sensitive data, and using encrypted DNS requests, can help users safeguard their personal information from potential threats. Additionally, leveraging the Tor network with specific configurations can further anonymize web browsing, although it may come with performance trade-offs.
These tweaks reflect a growing recognition of the importance of digital privacy, empowering users to take control of their online security without relying solely on external tools or services.
What additional measures might users adopt to enhance their online security in an increasingly interconnected world?
Security researchers spotted a new ClickFix campaign that has been abusing Microsoft SharePoint to distribute the Havoc post-exploitation framework. The attack chain starts with a phishing email, carrying a "restricted notice" as an .HTML attachment, which prompts the victim to update their DNS cache manually and then runs a script that downloads the Havoc framework as a DLL file. Cybercriminals are exploiting Microsoft tools to bypass email security and target victims with advanced red teaming and adversary simulation capabilities.
This devious two-step phishing campaign highlights the evolving threat landscape in cybersecurity, where attackers are leveraging legitimate tools and platforms to execute complex attacks.
What measures can organizations take to prevent similar ClickFix-like attacks from compromising their SharePoint servers and disrupting business operations?
Google Gemini stands out as the most data-hungry service, collecting 22 of these data types, including highly sensitive data like precise location, user content, the device's contacts list, browsing history, and more. The analysis also found that 30% of the analyzed chatbots share user data with third parties, potentially leading to targeted advertising or spam calls. DeepSeek, while not the worst offender, collects only 11 unique types of data, including user input like chat history, raising concerns under GDPR rules.
This raises a critical question: as AI chatbot apps become increasingly omnipresent in our daily lives, how will we strike a balance between convenience and personal data protection?
What regulations or industry standards need to be put in place to ensure that the growing number of AI-powered chatbots prioritize user privacy above corporate interests?
The NHS is investigating claims that a software flaw at Medefer compromised patient data security, as the issue was discovered in November but may have existed for several years. Medefer has stated that no patient data breach occurred and that the flaw was promptly addressed, although cybersecurity experts have raised concerns about the company's response to the vulnerability. The situation underscores the critical importance of robust cybersecurity measures in handling sensitive medical information, especially within the healthcare sector.
This incident highlights the ongoing challenges that private medical services face in ensuring the security of patient data amid increasing reliance on technology and digital systems.
What measures should be implemented to enhance accountability and transparency in the management of patient data within private healthcare providers?
Truffle Security found thousands of pieces of private info in Common Crawl dataset.Common Crawl is a nonprofit organization that provides a freely accessible archive of web data, collected through large-scale web crawling. The researchers notified the vendors and helped fix the problemCybersecurity researchers have uncovered thousands of login credentials and other secrets in the Common Crawl dataset, compromising the security of various popular services like AWS, MailChimp, and WalkScore.
This alarming discovery highlights the importance of regular security audits and the need for developers to be more mindful of leaving sensitive information behind during development.
Can we trust that current safeguards, such as filtering out sensitive data in large language models, are sufficient to prevent similar leaks in the future?