Archive — US — techcrunch
Hacktivist scrapes over 500,000 stalkerware customers’ payment records
A hacktivist has scraped over 500,000 payment records from a stalkerware app provider, revealing email addresses and partial payment info of customers. The leak involves apps like Geofinder and uMobix, known for unauthorized surveillance. This incident highlights ongoing cybersecurity issues in stalkerware, with past breaches indicating systemic flaws among these vendors.
Key points
- Hacktivist (moniker: 'wikkid') exploited a security flaw in the stalkerware vendor's website.
- Over 536,000 records were obtained, including customer email addresses and partial payment details.
- Affected apps include uMobix, Xnspy, and Peekviewer, which are marketed for spying on romantic partners.
- Previous breaches have occurred with stalkerware apps due to poor cybersecurity practices.
- TechCrunch confirmed the authenticity of the records through a detailed verification process.
Why it matters
- In 2022, Xnspy leaked private data from many Android and iPhone users, showcasing the vulnerability of stalkerware.
- The incident reflects broader trends in cybersecurity, especially in the illicit surveillance software industry.
- The growing public concern about privacy violations is driving discussions on regulation and ethical tech use.
This incident underscores the severe cybersecurity failures within the stalkerware industry, highlighting the risks posed to privacy and the potential for exploitation, reaffirming the need for robust security measures and regulatory oversight.