Data breach exposes millions of mSpy spyware customers

Customer service emails dating back to 2014 exposed in May breach

12:15 pm PD T-July 11, 2024 Image Credit Bryce Durbin / TechCrunch

As a result of data hacking on the MSPY-telephone system, not only millions of buyers who have purchased this spy application in the past decade, but also Ukraine companies behind it have become popular.

Unknown people covered the MSPY in May 2024, covering electric messages to services and investment services, their information, and stealed millions of support-services. However, the hacking of companies that provide spy programs is increasingly produced, they should still be noticed, and in many cases, if they are provided with buyers using services offered. I have very confidential information.

As a result of hacking, the work record with the buyer was stolen from 2014 from the Help System, a SPY manufacturer based on Zendesk.

MSPY is a telephone tracking application that is advertised as a way to track children and monitor employees. Like many spy programs, they are still widely used to monitor people without their consent. Similar applications are still popular as "software tracking" because people in romantic relationships are often used to monitor their partner without permission or consent.

By using the MSPY application, you can, in principle, install a spy program that had material access to telephone devices, allowing you to display the telephone content in real time.

In principle, as is common in spy programs, there are electric messages from people who require their partners, relatives, and children's telephone facilities along the tech crunch. Some of these notifications and reports are some hig h-ranking U. S. Battle, the active federal arbitrators of the US Appeals Court, and the US Government Division's Director and Safety. It was included to seek the help of the government's Alkanzas Cabinet.

Nevertheless, the accumulation of millions of professional services on the support service of Zendesque data is only the total number of databases of MSPY buyers using support services. The number of MSPY buyers is larger.

BRAINSTACK of Ukraine, the owner of MSPY, did not accept the precedent of hacking and did not publish.

Troy Hunt, who is in charge of the data leakage of Have I Been Pwned, receives a complete copy of the completed data, and MSPY to the Electric Post's past into a catalog of The Electric Post. Added to the catalog of data outflow.

Hunt told TechCrunch, in fact, he was informed of some of the i've Bean Pwned subscriber, in fact, and the data was actually obvious.

MSPY is the latest hacking spy program for telephone devices in recent months, matching the list that was compiled a while ago by TechnoCrunch. MSPY hacking is that spy manufacturers believe in the protection of their data. Indicates that it cannot be done.

Millions of mSpy customer messages

TechCrunch has investigated more than 100 GB of Zendesk records, which include the order of millions of individual customer service, their email addresses, and the contents of these messages.

Some email addresses are the unwilling victims targeting the MSPY buyer. The data also indicates that some correspondents have actually asked the company to explain the latest popular hacking in 2018. Apart from this, a certain number of US law enforcement agencies has tried to deal with MSP Y-Summoned to Cour t-Cour t-Court requests and attempts to deal with the court. In one case, in a short time, in a short time, the official MSPY provided information on the FBI and information on the account and address of the buyer MSPY, who is a suspect of abduction and murder.

Each dataset ticket contained a lot of information about people in contact with MSPY. In many cases, the data also included their location information based on the icon of the sender's device.

TechCrunch surveyed the residence of MSPY buyers, extracted all position coordinates from the data kit, and applied it to the map in their own mode. As a result, it was found that MSPY buyers exist all over the world, and that the huge clusters were in Europe, India, the sunrise country, South America, the United Kingdom, and the United States.

A visualization of the data point in a place that indicates the approximate purchaser's presence from the MSPY database. Image loan: tech crunch

It is not considered illegal to obtain a spa software, but it is considered illegal to resell or to resell it to survive someone without the consent of the person. Last year's South American prosecutors, manufacturers' Spaissoft, federal authorities, and supervisors of local governments have acknowledged the Spa Soft Company's entry into video monitoring projects because spa software is in danger of cyber security and confidentiality. Not. The buyer who developed a spy software could be liable for not complying with the law when eavesdropping on the phone.

The electronic message in Zendesk's data outflow indicates that MSPY and their operators are fully aware of why buyers use a spa software that covers telephone devices forecasts without anyone knowing. 。 In some requests, the buyer later learns how to send MSPY from a partner's telephone device as recognized by her husband. The data also questions the use of MSPY by highly government officials, U. S. government agencies, police, and judicial authorities. It is unknown whether all cases of using spies were led to legal procedures.

According to information, the U. S. Appeals Court used the official government post in the 11th district of Kevin Nisom, Alabam, Georgia and Florida, from the address of the Electric Mail. Request a fund return from MSPY.

Kate Adams, the 11th Court Director of the Court, the United States environment, TechCrunch: "I used my own quality to close the home of the Judge News MM Mer." Adams decisively MSPY He refused to answer specific questions about whether the use or NewSoma monitoring object assigned the unanimity.

South American authorities and law enforcement agencies are still interested in datasets. Public support (Social Security Agency's General Supervision Office) and Interior to Realizing Federal Agency In the Electric Message of the General Manager General Office, he discovered the approved MSPY. CO M-What was given opportunities without specifying "our criminal investigation".

A representative of the public support administration's supervisor, who contacted TechCrunch, did not explain why the employee was interested in MSPY on behalf of the employee.

The Sheriff's Environmental Environmental Department, the Department of Arkansaw, called for a charity test of MSPY, as if to give NEIGHBDEN guardian a demonstration program for such a method. Sergeant did not answer TechCrunch if he had the right to contact MSPY.

The company behind mSpy

This is the third time since the company was established in 2010, MSPY's data was leaked. MSPY is one of the longest activities to install a mobile phone spy program, which has gained many customers.

Despite its scale and size, MSPY operators remain hidden from pryin g-favorite eyes and avoid being noticed. In many cases, spy manufacturers hide the true personality of employees in order to protect the company from legal risks and risks risks associated with the implementation of global telephone monitoring in many countries.

However, MSPY data from Zendesk revealed that the parent company was a Ukrainian technology company called Braintack.

MSPY is not listed on the BRAINTACK website. Brainstack only mentions the development of no n-secure "Pair Rental Control" applications, like public recruitment ads. However, the internal dump data Zendesk indicates that Brainstack is actively and directly participating in MSPY.

Zendesk's TechCrunch discovered a record in the data outflow, including the information of dozens of employees browned by e-mail addresses. Many of these employees were involved in MSPY's customer support, such as answering customer questions and requesting refunds.

Zendesk's data leak contains the real name of Brainstack employees, in some cases, and the fictitious names used to answer requests from MSPY customers to hide personal information. 。

In response to TechCrunch interviews, two Brainstack employees checked their names and told how they were discovered from records, but avoided the work at Brainstack.

Brainstack's Vladimir Citonicov General Director and Caterina Yurchuk Senior Executive Director did not respond to many emails seeking comments before publishing. Instead, the representative of the Brainstack did not reveal the name, but did not disagree with our information, but refused to answer the list of questions to the company's manager.

It is unknown who MSPY's Zendesk was hacked. Swiss hacker Maia Arson Crimew first reported about hacking, and then no n-profit groups, which create indexes for data infringement for social interests, have now been able to obtain data.

Certified Zendesrk Courtney Break declared TechCrunch: "At this time, we have no evidence discovered by Zendesk infringing its own platform", but MSPY's Zendesk is a proposal to support proposals. I did not find out if it was implemented.

"We comply with the user's content and action politics, and promise to investigate violations according to the established procedures as follows."

If you need support for you and your people, the passionate route (1-800-799-7233) to fight domestic violence is a victim of relentless charm and family violence. We provide time secret help. If you encounter an emergency, call 911. COALITION Against Stalkerware is looking for resources that your mobile phone is attacked by spyware. < SPAN> Certified Zendesrk Courtney Break declared Technicrunch: "At this time, we have no evidence discovered by Zendesk infringing its own platform", but MSPY's Zendesk supports proposals. He did not disclose whether the proposal status was implemented.