- Cocospy and Spyic found to leak sensitive information
- The developers do not respond and the errors are not resolved
- People’s photos, messages, call logs and more are at risk
E email addresses, text messages, call logs, photographs and other sensitive data that belong to millions of people may have been postponed online thanks to a few defective spyware applications.
Spyware apps, often also called “SPOPEWARE”, are apps that people hide installs on mobile devices that belong to their partners, children or the like. They are advertised as legitimate surveillance apps, but work essentially in the gray zone and are not allowed in larger app stores, such as the App Store or Play Store.
A cyber security researcher recently analyzed Cocospy and Spyic, two popular spyware apps whose code apparently has significant overlaps that allowed the researcher to pull sensitive information from their servers.
E -Mail addresses and more
TechcrunchAs first reported about the conclusions, the error was “relatively simple to exploit” but to protect the victims, decided not to share any details at this time.
When a person wants to install spyware on someone else’s device, they must first use an E email address to register an account.
The researcher managed to exfiltrating 1.81 million e -mail addresses used to register with Cocospy, and about 880,000 addresses used for Spyic. In addition to E email addresses, the researcher managed to access most of the data harvested by apps, including images, messages and call logs.
Due to the art of the app, developers try their best to remain hidden and out of reach. Techcrunch Derived that developers are most likely to be of Chinese origin but could not say with certainty – although there is some evidence that the developer may be 711.icu whose site is not even loaded.
The operators did not respond to media queries and have not addressed the vulnerabilities at the press time.
