Connect with us

Software

Brazilian phone spyware was hacked and victims’ devices were ‘deleted’ from server

blank

Published

on

blank

Portuguese-language WebDetetive spyware has compromised over 76,000 Android phones in South America, mostly in Brazil. WebDetetive is the latest phone spyware company hacked in recent months.

Unnamed hackers described how they exploited several security vulnerabilities to compromise WebDetetive’s servers and access its user databases in an undated note seen. The hackers said they enumerated and downloaded every dashboard record, including every customer’s email address, by exploiting other flaws in the spyware maker’s web dashboard, which abusers use to steal phone data.

The hackers said dashboard access allowed them to delete victim devices from the spyware network, severing the server connection to prevent data uploads. We definitely did. Because we could. Hackers wrote #fuckstalkerware in the note.

The spyware’s web dashboard cached over 1.5 gigabytes of data, including the note. That data included customer IP addresses and purchase history. The data also listed each customer’s compromised device, the spyware version running on the phone, and the data the spyware was collecting.

The cache did not contain victims’ phone contents.

DDoSecrets, a nonprofit transparency collective that indexes leaked and exposed datasets, gave the WebDetetive data for analysis.

WebDetetive had compromised 76,794 devices at the time of the breach. It also contained 74,336 unique customer email addresses, but WebDetetive does not verify email addresses when signing up, preventing meaningful analysis of the spyware’s customers.

The hackers of the WebDetetive breach did not provide contact information. Could not independently verify the hackers’ claim that it deleted victims’ devices from the network, but it did verify the stolen data by matching a selection of device identifiers in the cache against a publicly accessible endpoint on WebDetetive’s server.

WebDetetive is a phone monitoring app planted without consent, usually by someone who knows the phone’s passcode.

The spyware’s home screen icon changes after installation, making it hard to detect and remove. WebDetetive then stealthily uploads a person’s messages, call logs, phone call recordings, photos, ambient microphone recordings, social media apps, and real-time precise location data to its servers.

These “stalkerware” (or spouseware) apps have broad access to a victim’s personal and sensitive phone data, but spyware is notoriously buggy and shoddy, putting victims’ already-stolen data at risk.

Meet OwnSpy, WebDetetive
We know little about WebDetetive besides surveillance. Given the reputational and legal risks of spyware production and illegal surveillance, spyware makers often hide their identities. WebDetetive follows suit. Who owns and operates WebDetetive is not listed on its website.

The breached data reveals few details about WebDetetive’s administrators, but OwnSpy, another popular phone spying app, is its main source.

Since Apple and Google ban stalkerware apps from their app stores,  downloaded the WebDetetive Android app from its website and planted it on a virtual device to analyze it in a sandbox without giving it real data, such as our location. The WebDetetive app was largely repackaged OwnSpy spyware after we ran a network traffic analysis to understand its data flow. WebDetetive’s user agent, which it sends to the server to identify itself, still called itself OwnSpy even though it was uploading our virtual device’s dummy data.

blank

Mobile Innovations, led by Antonio Calatrava in Madrid, develops OwnSpy. OwnSpy claims to have 50,000 customers and has compromised 50,000 devices, but its website dates to 2010.

An archived copy of OwnSpy’s affiliates website shows that others can make a commission by promoting the app or offering “a new product to your clients” in exchange for a cut of the profits. No other operational links between OwnSpy and WebDetetive are known. Calatrava did not respond to a request for comment or WebDetetive administrator contact information.

OwnSpy’s infrastructure went offline shortly after we emailed Calatrava. In a separate network traffic analysis, Found that OwnSpy’s spyware app was briefly unusable at publication. WebDetetive’s app works.

Destructive attack?
WebDetetive is the second spyware maker to be hacked in recent months. After a hack exposed and deleted victims’ stolen phone data from LetMeSpy’s servers, Polish developer Rafal Lidwin shut down the spyware app. Lidwin refused to discuss the incident.

At least a dozen spyware companies have exposed, spilled, or otherwise compromised victims’ stolen phone data in recent years due to poor coding and easily exploitable security vulnerabilities, according to .

Couldn’t reach WebDetetive administrators for comment. A data breach email to WebDetetive’s support address, including whether the spyware maker has backups, went unanswered. If the spyware maker has the data or records to notify customers or victims of the data breach, it is unclear.

Despite their rarity, destructive attacks can harm spyware victims. Spyware alerts the abuser if the app stops working or is removed from a victim’s phone, and severing a connection without a safety plan could put spyware victims in danger. Those who suspect their phone is compromised can find resources on the Coalition Against Stalkerware website.

Find and remove WebDetetive
WebDetetive and OwnSpy disguise themselves as Android system-presenting Wi-Fi apps, unlike most phone monitoring apps.

WebDetetive is easy to spot. The app is called “WiFi” and has a white wireless icon in a blue circle on a white background.

blank

Tap and hold to view app info; app is called “Sistema.”

blank

If safe, our general guide can help you remove Android spyware from your phone. Google Play Protect can protect your device from malicious Android apps, so enable it. Google Play settings reveal its status.

As Editor here at GeekReply, I'm a big fan of all things Geeky. Most of my contributions to the site are technology related, but I'm also a big fan of video games. My genres of choice include RPGs, MMOs, Grand Strategy, and Simulation. If I'm not chasing after the latest gear on my MMO of choice, I'm here at GeekReply reporting on the latest in Geek culture.

Continue Reading

Apps

Threads finally starts its own program to check facts

blank

Published

on

blank

Meta’s latest social network, Threads, is launching its own fact-checking initiative after leveraging Instagram and Facebook’s networks for a brief period.

Adam Mosseri, the CEO of Instagram, stated that the company has recently implemented a feature that allows fact-checkers to assess and label false content on threads. Nevertheless, Mosseri refrained from providing specific information regarding the exact timing of the program’s implementation and whether it was restricted to certain geographical regions.

The fact-checking partners for Threads—which organizations are affiliated with Meta—are not clearly specified. We have requested additional information from the company and will revise the story accordingly upon receiving a response.

The upcoming U.S. elections appear to be the main driving force behind the decision. India is currently in the midst of its general elections. However, it is improbable that a social network would implement a fact-checking program specifically during an election cycle rather than initiating the project prior to the elections.

In December, Meta announced its intention to implement the fact-checking program on Threads.

“At present, we align the fact-check ratings from Facebook or Instagram with Threads. However, our objective is to empower fact-checking partners to evaluate and assign ratings to misinformation on the application,” Mosseri stated in a post during that period.

Continue Reading

Software

Google developed several pioneering social applications for Android, such as Twitter and various others

blank

Published

on

blank

Here is a lesser-known piece of startup history that may not be widely known outside of the technology companies themselves: Google itself developed the initial iterations of well-known Android applications, such as Twitter. The revelation was made during a recent podcast featuring Sara Beykpour, the former senior director of product management at Twitter and current co-founder of the AI news startup Particle.

Beykpour discusses her involvement in Twitter’s past in a podcast with Lightspeed partner Michael Mignano. She details her employment at Twitter in 2009, where she started as a tools engineer, during a time when the company had a workforce of approximately 75 individuals. Subsequently, Beykpour transitioned to working on mobile applications at Twitter during a period when third-party applications were gaining traction on different platforms, such as BlackBerry and iOS. Twitter bought one of those applications, called Loren Brichter’s Tweetie, and used it as the basis for its initial official iOS app.

Beykpour stated that Twitter’s Android app originated from Google.

The Twitter for Android client was a prototype app that Google created and gave to them, according to her statement on the podcast. “During that period, Google developed all the popular social apps such as Foursquare and Twitter, resulting in a similar appearance among them.”

Mignano interrupted, requesting clarification on the matter. Did Google develop applications in order to encourage companies to adopt Android?

“Yes, precisely,” Beykpour replied.

Following that, Twitter took over control of the Google-developed Android app and started to improve its features. According to her, Beykpour was the company’s second Android engineer.

Google documented its efforts on the Android Twitter client in a blog post in 2010. However, the media coverage during that time failed to acknowledge Google’s contribution, resulting in this aspect of internet history being overlooked. Google’s post details the integration of early Android best practices into the Twitter app. Beykpour informed TechCrunch that Virgil Dobjanschi, the post’s author, held the primary role of software engineer.

“We were expected to direct any inquiries to him,” she recalls.

Beykpour also recounted additional anecdotes regarding Twitter’s early stages. As an example, she was involved in the development of Vine, Twitter’s video app, after returning to Twitter from working at Secret. She faced pressure to release Vine on Android before Instagram launched its own video product. According to her, she managed to meet the deadline by introducing Vine approximately two weeks prior to the release of Instagram Video.

The latter had a significant impact on Vine’s metrics, and according to Beykpour, it was the main factor that caused the downfall of the popular app.

She claimed that, even though it took several years for Vine to finally shut down, “that was the day when the signs of its demise became evident.”

At Twitter, Beykpour spearheaded the discontinuation of Vine’s product—an application that remains highly popular, to the extent that even Elon Musk, the new owner of Twitter/X, continues to playfully hint at its potential revival. However, Beykpour believes that Twitter made a sound decision regarding Vine, as he acknowledges that the app was not experiencing growth and was costly to maintain. She concedes that others may have a different perspective, possibly contending that Vine lacked sufficient resources or support from leadership. However, the ultimate reason for the closure was Vine’s effect on Twitter’s financial performance.

Beykpour also recounted a captivating anecdote regarding his experience working on Periscope. She left Secret and joined the startup just as Twitter purchased it. She recalls the necessity of rejoining Twitter using an alias in order to maintain secrecy about the acquisition for a period of time.

During her presentation on Twitter, she also discussed the challenges associated with acquiring the necessary resources to create and enhance products and features specifically designed for power users, such as journalists.

“Twitter faced difficulties in defining its user,” she stated, as it “relied heavily on conventional OKRs and metrics.” However, it was a reality that only a small proportion of individuals engage in tweeting, and within this subset, only a portion of them are responsible for creating the content that is truly desired by everyone. Beykpour acknowledges that quantifying this subset was a challenging task.

Currently at Particle, her expertise in developing Twitter is influencing the approach for the AI news application, which aims to facilitate the connection between individuals and the news that is relevant to their interests and happening in their vicinity.

“Particle represents a new approach to consuming your daily news,” Beykpour states in the podcast. The objective of the app is to offer a comprehensive and diverse outlook on news while also granting users access to journalism of exceptional quality. The startup is seeking alternative methods to generate revenue from reporting, in addition to advertisements, subscriptions, or micropayments. Nevertheless, the precise details of Particle’s approach are still under deliberation. The startup is presently engaging in discussions with potential publisher partners regarding the remuneration for their contributions.

Continue Reading

Apps

Mark Zuckerberg reports that Threads has a total of 150 million users who engage with the app on a monthly basis

blank

Published

on

blank

Threads, Meta’s alternative to Twitter and X, is experiencing consistent and steady growth. During the Q1 2024 earnings call, Mark Zuckerberg stated that the social network currently has over 150 million monthly active members, which is an increase from 130 million in February.

Threads made significant progress in integrating with ActivityPub, the decentralized protocol that powers networks such as Mastodon, during the last quarterly earnings conference. In March, the firm granted U.S.-based users who are 18 years of age or older the ability to link their accounts to the Fediverse, enabling their posts to be seen on other servers.

By June, the business intends to make its API available to a broad range of developers, enabling them to create experiences centered on the social network. Nevertheless, it remains uncertain whether Threads will enable developers to create comprehensive third-party clients.

Meta just introduced their AI chatbot on various platforms like Facebook, Messenger, WhatsApp, and Instagram. Threads was conspicuously omitted from this list, perhaps because of its lack of built-in direct messaging capabilities.

Threads introduced a new test feature on Wednesday that allows users to automatically archive their posts after a certain length of time. Additionally, users have the ability to store or remove specific postings from an archive and make them accessible to the public.

Threads is around nine months old, and Meta has consistently expanded its readership. Nevertheless, Threads cannot be considered a viable substitute for X, as Instagram’s head, Adam Mosseri, explicitly stated in October that Threads will not “amplify news on the platform.” However, Meta’s social network continues to grow in popularity. According to app analytics company Apptopia, Threads now has more daily active users in the U.S. than X, as Business Insider reported earlier this week.

Continue Reading

Trending