Home technology cyber-security millions of mSpy records compromised

Millions of mSpy records compromised

Cyber Security

CIO Bulletin
2018-09-06

mSpy has leaked millions of records that include data on software purchases, iCloud usernames and authentication tokens of devices of mSpy. The spyware company that allows you to spy on your kids or anyone you want, sells markets itself as a leading provider of parental control software. mSpy gives its users access to a person’s WhatsApp, Snapchat, Facebook and other messaging apps. Further, it also monitors calls, texts, and location.

The security researcher Brian Krebs revealed that mSpy took the database offline. But when online the database contained usernames, passwords and private encryption keys of each mSpy customer who had logged on to the mSpy website or purchased a mSpy license in the last 6 months.

The millions of records compromised came from an insecure database. mSpy has refused to comment on this. The company has been involved in a similar cybersecurity incident in 2015 where it had left records unsecured. In the wake of this incident in 2015, mSpy had pledged to double its efforts to ensure security but the company had not disabled links to countless screenshots on its servers that were taken from mobile devices running mSpy. Let’s hope its efforts are better this time around.