Spyhide spyware eavesdrop on thousands of Android devices

The Iranian-made Android spyware application, Spyhide, is allegedly spying on about 60,000 devices since 2016. Moreover, this surveillance app has collected private phone information from thousands of Android devices worldwide.

Based on reports, Spyhide is a reliable tool for threat actors that allows them to plant spyware on targeted phones. The spyware app stays hidden on a victim’s phone’s home screen, making it challenging to detect and remove.

In addition, Spyhide silently uploads the phone’s photos, messages, contacts, recordings, call logs, and location once planted by its operators.

However, these stalkerware strains are known to be buggy malicious tools and could accidentally leak their target’s data. This detail implies that the owners of these stolen private data could face further risk of exposure if the spyware malfunctions.

 

Spyhide is the newest member of the growing spyware strains that compromise numerous mobile owners.

 

Spyhide is the latest spyware operation compromising Android phone users. However, a researcher claimed in its post that the spyware developer exposed a portion of its developmental structure, which allowed them to access the source code of the web-based dashboard that the threat actors used in their campaigns.

Researchers explained that they acquired the dashboard, which the attackers utilised to view the stolen phone information of its victims.

Furthermore, cybercriminals acquired access to the back-end databases by exploiting a flaw in the dashboard’s shoddy code. This process exposes the capabilities of the spyware operation and its alleged operators.

Spyhide’s database includes detailed records of over 60,000 infected Android devices from 2016 to its latest exfiltration actions earlier this month.

The confirmed records of this database include troves of data, such as call logs, SMS messages, and precise location history of the infected phone. The spyware also holds the photos, videos, and recordings of every infected device.

Cybersecurity experts warn phone users regarding the threats posed by these spyware apps. Therefore, users should refrain from downloading unnecessary applications, especially the ones offered by untrusted sources.