Another surveillance app has been targeted by hackers, revealing personal data. An anonymous hacker, after gaining unauthorized access to the servers of “TheTruthSpy”, published photos, private messages and even locations of the app’s victim users.
"TheTruthSpy" is the company behind a well-known monitoring application, where the user has the ability to "monitor a phone that belongs to them and has consent to it," according to the company itself.
The application, which is not available in any official app store, can be installed on the victim's mobile phone and the user is then able to monitor the location, call list, text messages, browsing history, and even eavesdrop on the victim in real time.
The hacker responsible for this attack managed to identify a vulnerability in the software the company uses to access the server, where he gained further access to customer data and audio files. Then, using a script, he managed to collect 10,000 usernames along with the corresponding passwords for the application.
In addition to the data of the victims of the application, the hacker managed to extract personal data from the users as many of them use the same access details between many online services such as personal emails and even PayPal. "TheTruthSpy" later proceeded to upgrade the application to stop further malicious use by the hacker.
This is not the first time such an app has been targeted by hacking. Earlier in 2018, the company “Retina-X” was forced to discontinue the release of its own apps PhoneSheriff, TeenShield, SniperSpy and Mobile Spy after the first two were subjected to multiple hacking attacks.
