A significant data breach has been discovered affecting the stalkerware application Spyzie, exposing sensitive information from hundreds of thousands of Android and iPhone users. The app, which is marketed as a parental monitoring tool, operates outside of official app stores and is typically installed without device users’ knowledge or consent – a practice that has raised serious privacy concerns in the mobile security community.
A cybersecurity researcher uncovered that Spyzie shares source code with similar applications Cocospy and Spyic, revealing a vulnerability that enabled access to their servers. The breach compromised over 510,000 unique email addresses belonging to Android users, along with data from approximately 4,900 iPhone and iPad users. The incident matches a pattern of security vulnerabilities in surveillance applications, similar to the EagleMsgSpy surveillance tool discovered earlier.
The exposed information includes email addresses used for registration across the three apps, text messages, call logs, and photographs. The operators of Spyzie have not responded to media inquiries regarding the security vulnerabilities. The lack of response raises particular concern given the sensitive nature of the compromised data and the potential for its misuse in identity theft or surveillance.
For Android users concerned about potential surveillance, dialing “001” and pressing the call button can reveal the presence of the app on their device, enabling its removal. iOS users are advised to review their Apple Account for unauthorized devices and implement two-factor authentication as a security measure. Google has recently enhanced Android security through features like Identity Check, which requires biometric authentication for accessing critical settings.
The vulnerability extends beyond Spyzie to include related applications Cocospy and Spyic, which share similar infrastructure. These applications are not available on official app stores like Google Play or the Apple App Store due to their surveillance capabilities, highlighting the ongoing challenges in protecting mobile users from unauthorized monitoring software.
Sources: TechRadar, Android Headlines, TechCrunch
Follow Us