90,000 Screenshots of One Celebrity's Phone Were Exposed Online
a cloud repository was publicly accessible on the open internet with no access controls. It contained nearly 90,000 screenshots showing a European celebrity’s private messages, photos, and phone usage using stalkerware.
“Having access to someone’s phone means you have unobstructed access to all of his or her life”
#stalkerware #privacy #security #cybersecurity #Hackers #hacking #hacked
Stalkerware Breach Exposes Risks for Executives
A shocking stalkerware breach has exposed a treasure trove of sensitive information, including 86,859 images - seemingly screenshots from a single victim's device - used to secretly stalk a high-profile European entrepreneur and media personality. The alarming leak highlights the very real risks executives face in the digital age.
#Stalkerware #DataBreach #EmergingThreats #CelebrityTargeting #Surveillance
90,000 Screenshots of One Celebrity's Phone Were Exposed Online
Exposed Data Illustrates the Nightmare Scenario for a #Stalkerware Victim
Extremely sensitive personal data from a European #celebrity that appears to have been compiled using #spyware was publicly accessible until a researcher flagged the exposure.
#privacy #security
📢⚠️ Private chats, photos, and phone screengrabs of celebrities and influencers exposed after a suspected stalkerware setup left a database open. Over 86K files leaked.
Read: https://hackread.com/private-chats-photos-celebs-expose-stalkerware-leak/
#CyberSecurity #Privacy #Stalkerware #CyberCrime #DataBreach
Cerberus is one of the longest-running stalkerware apps on Android.
We reverse-engineered their ecosystem to document how it operates, and why Google must remove it from the Play Store, stop monetizing it through AdMob, and stop hosting the Firebase Cloud Messaging that runs its C2.
tl;dr https://hexproof.dev/datagrams/cerberus-on-play/
deep dive https://hexproof.dev/datagrams/cerberus-stalkerware-re/
Cerberus on Google Play: €5/month buys silent camera, microphone, GPS, and SMS access on a victim's phone. Researchers reported it to Google as intimate-partner-violence spyware in 2018; Google removed it later that year on an unrelated policy and relisted it in 2023. Google AdMob pays the developer; Google Firebase hosts the command-and-control backend.
Researchers have found a new case where government authorities used a fake Android app to plant spyware on a target’s phone. The company that allegedly developed the spyware was not previously known to sell this type of software.
Men Are Buying Hacking Tools to Use Against Their Wives and Friends
https://www.wired.com/story/men-are-buying-hacking-tools-to-use-against-their-wives-and-friends/
gtbarry
netzpolitik.org
Analyst207
ransomNews
The New Oil
PrivacyDigest
Hackread.com
hexproof