Archive — US — techcrunch
Stalkerware apps Cocospy and Spyic are exposing phone data of millions of people
Cocospy and Spyic, two stalkerware apps, are exposing the personal data of millions due to a security vulnerability that allows unauthorized access to messages, photos, and personal information. The issue has drawn attention as it affects users who unknowingly installed the apps. Despite the severity, operators have yet to respond or fix the flaw.
Key points
- A security vulnerability in Cocospy and Spyic exposes the data of millions.
- Users often install these apps without knowing they are being monitored.
- The flaw allows anyone to access personal data and email addresses of users.
- TechCrunch identified 2.65 million unique email addresses linked to the apps.
- These apps operate stealthily, typically marketed as parental control tools.
- The security incident reflects ongoing issues with stalkerware and data breaches.
- Cocospy and Spyic are linked to a China-based developer, highlighting international implications.
Why it matters
- Similar surveillance apps have faced security issues in the past, with 23 known cases since 2017.
- This incident aligns with increasing concerns over digital privacy and security in 2025.
- The rise in remote work has led to heightened use of monitoring apps in corporate environments.
- Legislation against stalkerware is gaining traction globally as awareness increases.
The leak of personal data from Cocospy and Spyic underscores the urgent need for stronger security measures in surveillance technologies, particularly given their potential for misuse and the growing digital privacy concerns in today's tech landscape.