- Spyzie turned out to be vulnerable to the same mistake as Cocospy and Spyzie
- More than half a million Android users were exposed
- About 4,900 iOS users were also exposed
Hundreds of thousands of Android users, as well as a few thousand iPhone users, have compromised their sensitive data by a partner app, called Spyzie.
The apps were found leaking e -mail addresses, SMS messages, Urpwogbooks, photos and other sensitive data, belonging to millions of people who, without their knowledge or permission, have installed these apps on their devices. The people who have installed those apps, in most cases, partners, parents, important others, have also exposed their e -mail addresses in the same way.
The researcher who has found all these defects does not yet share the details and claims that they are fairly easy to operate and have not yet been tackled.
E -mail addresses and more
Spyware apps, often also called ‘spouse’, are apps that secretly install people on mobile devices of their partners, children or something similar. They are advertised as legitimate monitoring apps, but in essence work in the gray zone and are not allowed in large app shops, such as the App Store or Play Store.
This is the third such app with the same mistake, after a cyber security researcher recently analyzed Cocospy and Spyic, two other popular Spyware apps whose code apparently has important overlaps, so that the researcher can get sensitive information from their servers.
The researcher succeeded in exfiling 1.81 million e -mail addresses that were used to register with Cocospy, and around 880,000 addresses used for Spyisch. In addition to e -mail addresses, the researcher succeeded in gaining access to most data harvested by the apps, including photos, messages and drilling plays.
For Spyzie, the researcher managed to collect more than 510,000 unique e -mail addresses from Android users, and sensitive data on at least 4,900 iPhone and iPad users.
The operators did not respond to media questions and have tackled the vulnerabilities at the moment that it was not tackled.
By Techcrunch
Leave a Reply