Spyzie Stalkerware Vulnerability Exposes Sensitive Data of Thousands of Users

• Surveillance app Spyzie exposed almost 519,000 customer email addresses due to a vulnerability.
• It allows unauthorized access to the users’ sensitive phone data, including captured messages and photos.
• The app’s security lapse overlaps with the one recently reported for similar spyware.

Spyzie, a previously little-known phone monitoring app, has come under scrutiny for compromising over 500,000 Android devices and nearly 5,000 iPhones and iPads and exposing thousands of user email addresses. 

The breach notification site Have I Been Pwned has added 518,643 unique email addresses belonging to Spyzie customers that could be harvested by exploiting this flaw, which reportedly also enabled unauthorized access to sensitive data.

According to findings shared by a security researcher, messages, photos, call logs, and location details have been exposed due to vulnerabilities in the app's software.

Spyzie’s security flaws mirror those of similar stalkerware apps Cocospy and Spyic, which collectively compromised the data of more than 2 million users earlier this year. 

Despite revelations of the breach, Spyzie’s operators have not responded to inquiries, and the bug remains unfixed.

Stalkerware like Spyzie is primarily marketed as a tool for tracking smartphones, often used in abusive relationships or by overbearing parents. These apps remain hidden on devices, continuously uploading private data to remote servers. 

On Android devices, physical access is required to install the app, while iPhones and iPads are typically compromised through stolen iCloud credentials.

This latest incident highlights broader concerns associated with stalkerware. The apps not only violate users' privacy but also put both the tracked individuals and the app customers at risk of hacking due to poor data security practices.

Spyzie is the latest example of how poorly secured stalkerware apps pose a dual threat—to the individuals being monitored and to those using the app to spy on others.