mSpy

MSpy has leaked millions of sensitive records online.

The database contained millions of records, including the username, password and private encryption key of each mSpy customer who logged in to the mSpy site or purchased an mSpy license over the past six months.

It included passwords, call logs, text messages, contacts, notes and location data secretly collected from phones running the stealthy spyware.

The private key would allow anyone to track and view details of a mobile device running the software.

In addition, the database included the Apple iCloud username and authentication token of mobile devices running mSpy.

Stumbled this database would have allowed to browse the WhatsApp and Facebook messages uploaded from mobile devices equipped with mSpy.

Source: https://krebsonsecurity.com/2018/09/for-2nd-time-in-3-years-mobile-spyware-maker-mspy-leaks-millions-of-sensitive-records/

"id": "MSP44211122",
"linkid": "mspycompany",
"type": "Data Leak",
"date": "09/2018",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"