Hacked, leaked, exposed: Why you should never use stalkerware apps

A disturbing trend has emerged within the stalkerware industry, where software aimed at monitoring personal relationships has repeatedly fallen victim to data breaches. These applications, marketed to individuals looking to spy on their partners, have not only raised ethical concerns but have also proven to be incredibly insecure. Recent findings reveal that at least 26 stalkerware companies have suffered significant security breaches since 2017, compromising sensitive data of thousands. The latest incident involves Catwatchful, which exposed the private information of close to 26,000 victims. Previous breaches this year included SpyX, Cocospy, Spyic, and Spyzie, all of which left a trail of personal messages, photos, and call logs accessible to hackers. The situation is alarming; four stalkerware companies have experienced multiple breaches, highlighting a pattern of negligence within this murky industry. The director of cybersecurity at the Electronic Frontier Foundation, Eva Galperin, describes the stalkerware market as a 'soft target' due to the lack of scruples among its operators. Many of these companies explicitly promote their products as tools for catching cheating partners, encouraging illegal surveillance practices. The history of breaches dates back to 2017, when hackers targeted Retina-X and FlexiSpy, revealing a total of 130,000 customers worldwide. Motivated by a desire to expose what they deemed a toxic industry, these hackers claimed responsibility for the attacks. Despite the negative attention and multiple hacks, some companies, like FlexiSpy, continue to operate, while others, such as Retina-X, have shut down after repeated breaches. In addition to hacking incidents, there have been numerous cases of accidental data exposure. For instance, SpyFone left sensitive information unprotected on an online server, allowing anyone to access text messages, photos, and more belonging to unsuspecting victims. Other companies like FamilyOrbit and mSpy have also faced similar issues, leaving vast amounts of personal data exposed. The Federal Trade Commission has taken action against some stalkerware companies, including a ban on SpyFone and its CEO due to significant security lapses. However, shutting down a company doesn’t mean the end of its operations; many former stalkerware developers simply rebrand and continue their practices under new names. While there is a slight indication that the use of stalkerware might be declining, as noted by security firm Malwarebytes, the potential for abuse remains high. Legal concerns aside, the ethical implications of using such software are profound. Using stalkerware to monitor anyone, including children, often leads to breaches of trust and can perpetuate a cycle of surveillance and control. Experts recommend avoiding these insecure applications and instead utilizing built-in parental controls offered by devices, which provide safer and more ethical ways to monitor children. With the prevalence of stalkerware breaches, it's crucial for individuals to consider the risks associated with these applications, not just for their own security, but for the privacy of those being monitored.