Archive — US — techcrunch
Google took a month to shut down Catwatchful, a phone spyware operation hostedon its servers
Google suspended Catwatchful, a spyware operation hosted on its Firebase platform, after TechCrunch alerted it a month prior. The spyware, presented as a child monitoring app, accessed users' private data. Security flaws exposed sensitive information, including customer emails and passwords. Google failed to explain the month-long investigation delay, highlighting ongoing issues with spyware and data breaches due to poor cybersecurity practices.
Key points
- Catwatchful was using Google Firebase to host spyware targeting Android devices.
- TechCrunch reported the spyware operation to Google, prompting an investigation.
- Google suspended Catwatchful's operations after determining they violated its terms of service.
- Catwatchful operated as a hidden app, allowing non-consensual surveillance of victims.
- A security bug exposed sensitive data, including emails and plaintext passwords, causing significant risk.
- This incident is part of a trend where spyware operations suffer data breaches due to inadequate security.
Why it matters
- Spyware incidents have been increasing, with Catwatchful marking the fifth such breach in 2023.
- This aligns with the growing concerns around digital privacy and security for mobile users.
- The situation underscores the importance of recognizing malicious apps and having cybersecurity measures in place.
The Catwatchful case illustrates the ongoing challenges of combating spyware and highlights the need for stringent cybersecurity practices among tech companies to protect users from malicious operations.