Slashdot Mirror
Kaspersky Lab Will Warn You If Your Phone is Infected With Stalkerware (cnet.com)
Kaspersky Lab said today it would start flagging stalkerware as malicious, and warn people through its Android app when stalkerware is installed on their phones. In 2018 Kaspersky Lab detected stalkerware on 58,487 mobile devices. From a report: Stalkerware is frequently used by stalkers and abusers to spy on people through their phones. It essentially turns victims' phones into surveillance devices, letting an attacker track a person's every step and listen in on every word. Stalkerware is quietly installed on people's devices, and then accesses personal data including GPS location, text messages, photos and microphone feeds. You don't have to be an expert to get your hands on it -- stalkerware is sold online, for as little as a few hundred dollars. Some purveyors offer subscription plans for $68 a month, according to Kaspersky Lab.
Kaspersky Lab said it was motivated to start flagging stalkerware apps after speaking with Eva Galperin, the Electronic Frontier Foundation's head of cybersecurity. "As a result, we now flag commercial spyware with a specific alert which warns users of the dangers stalkerware poses," Alexey Firsh, a security researcher at Kaspersky Lab, said in a statement. "We believe users have a right to know if such a program is installed on their device."
Kaspersky Lab said it was motivated to start flagging stalkerware apps after speaking with Eva Galperin, the Electronic Frontier Foundation's head of cybersecurity. "As a result, we now flag commercial spyware with a specific alert which warns users of the dangers stalkerware poses," Alexey Firsh, a security researcher at Kaspersky Lab, said in a statement. "We believe users have a right to know if such a program is installed on their device."
... because of all the Stalkerware that Google, the phone manufacturer, the Chinese Government and the NSA pre-installed on your new device before you switched it on for the first time?
Sounds not that value-adding to me.
Aren't ALL apps stalkerware these days?
AKA pre-divorce hooks.
1. Why did Kaspersky (apparently) not previously mark this "stalkerware" as malware? Since it is, you know... malicious? Makes no sense. Why even make the distinction between "stalkerware" and "malware" at all? Both are the same thing.
2. Does this mean that Kaspersky will show warnings on 100% of all "mobile phones", then, since 100% of these surveillance devices are used for stalking you?
3. How can this "stalkerware" be said to "turn[s] victims' phones into surveillance devices" when they already *are* surveillance devices by design, and impossible to escape? No sane human being walks around with these things, or talks to anyone who wears one or has one nearby.
4. How does this "stalkerware" end up on the victims' surveillance devices in the first place?
Bonus question: can somebody tell me of an .onion that lets me enter any phone number and then get a JSON blob with the last 10,000 GPS positions for that phone? Payments over Bitcoin, please.
Oh honey. You have much to learn.
Stalkerware is frequently used by stalkers and abusers to spy on people through their phones.
And it's more frequently used by people who want to catch their spouse cheating on them before they file for divorce so they don't get screwed (in court).
You can argue about whether or not that's right or not, but the "stalkers and abusers" line is mostly bullshit. It's people prepping for divorce and gathering evidence.
If their phones are infected?
the biggest stalker app off all, but some others are not far off either.
will it report these apps, my biggest guess is 'no', even though it should.
all this will do is create a false sense of security/privacy.
On a long enough timeline, the survival rate for everyone drops to zero.
I hope they make a good amount from facebook for not tagging their apps as stalkerware.
What will warn me that my phone is infected with Kaspersky?
Her ex-BF installed tracking crap on her iPhone when she was asleep. He unlocked the phone using the fingerprint sensor and we already found him tracking her in some software but god knows what else he did.
Oh, her phone also stopped doing cloud backups because he connected her phone to his computer and backed it up. Apparently when you do a local backup, cloud backups automatically stop until you tell it to go back to cloud backup. So he downloaded all her info that was on the phone.
Why was such application behavior not flagged from the start by every security software company to begin with? The Spyware-As-A-Service business model is really getting out of hand. That’s probably one major reason why so many serious exploits go undetected for as long as they do. Security software can’t differentiate between spyware and “legitimate” applications because the “legitimate” applications exhibit the same behavior.
And for people who might be at risk of abduction, this software could be beneficial as well, outside of spying on cheating spoused or someone's phone you sideloaded it onto.
There *ARE* valid use-cases for these apps, both visible and invisible, but only if the party physically carrying the phone is aware of the risks, consequences, and repurcussions of its use.