uTalk

thrive

Member

Registered: 2023-01-04

Posts: 2,068

LetMeSpy,Android spy app, suffers a major data breach, exposing users

LetMeSpy, an Android-based phone monitoring app, has disclosed a security breech that made it possible for an unauthorized third party to steal private information related to thousands of Android users.

LetMeSpy stated in a statement on its website that the incident happened on June 21, 2023.
"As a result of the attack, the criminals gained access to email addresses, telephone numbers, and the content of messages collected on accounts," the company noted.

LetMeSpy claimed it alerted law enforcement and data protection authorities as soon as the hack was discovered. Additionally, it is taking action to halt all account-related operations until further notice. The threat actor's identity and motivations are currently a mystery.

LetMeSpy, created by the Polish company Radeal, is available as a monthly subscription ($6 for Standard or $12 for Pro), allowing users to spy on others by simply installing the software on their devices. Its description as a tool for employee or parental control is revealed by an Internet Archive snapshot from December 2013.

LetMeSpy has a variety of features that can be accessed from the website to gather call logs, SMS messages, and geolocations. The app's icon can be hidden from the device's home screen launcher in an effort to avoid being noticed and removed.

The stalkerware app has been used to track 236,322 phones globally as of January 2023, harvesting more than 63,5 million text messages, 39,7 million call logs, and 43,2 million locations.

About 26,000 email addresses, 16,000 SMS messages, and a database of victims' locations, according to the Polish security research blog Niebezpiecznik, which broke the news of the breach and examined a dump of the stolen data.

The data originates from 2013, the year LetMeSpy started taking operations, according to a subsequent review of the TechCrunch information that was leaked. Additionally, data from at least 13,000 compromised devices is included in the records. Most of the victims are in the United States. S. India, as well as some of Africa.