.
Woburn, MA – April 3, 2019 -Kaspersky Lab is announcing it has upgraded its Kaspersky Internet Security for Android with Privacy Alert, a new feature that warns the users if their private information is being monitored via commercially available spyware. In addition, Kaspersky Lab researchers have published a report on the analysis of such applications, including some of the most popular consumer surveillance apps.
Commercial spyware programs are background-running apps installed on phones, which can be used to monitor and track device activity. While this kind of software is deemed to be legal, the program’s presence is often both unwanted and unknown by the user affected. Usually used to spy on partners or ex-partners, there is nothing to stop people from using such programs to target specific individuals for malicious purposes, leading to these types of programs being commonly referred to as ‘stalkerware.’ While functionality varies, it often allows the person who installed it to access their victim’s device information, SMS messages, photographs, social media conversations, geolocation data and, in certain cases, to transfer audio and camera recordings in real time.
Installing stalkerware on someone else’s device requires physical access, which can be done quickly by downloading an app onto the phone from a distributor’s website. In 2018, Kaspersky Lab products detected stalkerware programs on 58,487 unique mobile devices, proving the severity of the threat. In addition, stalkerware programs have been exposed and publicly criticizedmultipletimes. Yet, in most countries their status remains vague.
Kaspersky Lab has now developed a new attention grabbing alert that clearly notifies users of Kaspersky Internet Security for Android if such programs are found on their devices.
In addition, Kaspersky Lab researchers have looked at the wider landscape for such software. The resulting report, ‘Beware of stalkerware’, features analysis of commercially available spyware, including the most popular consumer surveillance apps. The research shows that alongside the obvious privacy invasion, such programs generally lack protection measures for the sensitive data being hijacked. For instance, five out of 10 stalkerware programs analyzed had either experienced a data-breach or were found to be vulnerable to such attacks. Analysts even discovered one vendor storing victim data files on a server with critical security vulnerability, leaving the stored data accessible to all.
The study that Kaspersky Lab researchers performed also exposes the extent of the so-called stalkerware industry. Even programs that have been shut down or at least claim to be so, continue to be marketed through official social media channels and offer franchise-like business models to buyers.
Kaspersky Lab has been flagging potentially harmful apps that are not malware – including adware and so-called legal spyware – for years, even creating a specific “not-a-virus” notification. However, as the problem of privacy abuse has increased, the company decided to reevaluate how information about certain types of threats was being communicated to customers.
“We were following what some media organizations and NGOs like the Electronic Frontier Foundation were doing to enhance privacy and security for vulnerable populations around the world, and to eliminate the threat that stalkerware poses. We were inspired by their activities so much that we decided to review how our own products treat such software,” says Alexey Firsh, security researcher at Kaspersky Lab. “As a result, we now flag commercial spyware with a specific alert which warns users of the dangers stalkerware poses. We believe users have a right to know if such a program is installed on their device. Our new alert will help them to do that and assess the risk properly.”
Kaspersky Lab recommends the following steps to prevent becoming a victim of a digital stalking:
- Only install mobile applications from official app stores, such as Google Play
- Block the installation of programs from unknown sources in your smartphone’s settings
- Never disclose the password or passcode to your mobile device, even if it is with someone you trust
- Never store unfamiliar files or applications on your device, as they could harm your privacy
- Change all security settings in your mobile device if you are leaving a relationship. An ex may undertake attempts to acquire your personal information in order to manipulate you
- Get control of programs running in the background and disable suspicious activity
- Use a reliable security solution that notifies you about the presence of commercial spyware programs aimed at invading your privacy on your phone, such as Kaspersky Internet Security
To learn more about the modern state of commercial spyware programs, read the report on Securelist.com.
To download Kaspersky Internet Security for Android with the new Privacy Alert, please visit the Google Play store.
About Kaspersky Lab
Kaspersky Lab is a global cybersecurity company, which has been operating in the market for over 21 years. Kaspersky Lab’s deep threat intelligence and security expertise is constantly transforming into next-generation security solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection and a number of specialized security solutions and services to fight sophisticated and evolving digital threats. Over 400 million users are protected by Kaspersky Lab technologies and we help 270,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com .
Media contact:
Sarah Kitsos
781.503.2615
sarah.kitsos@kaspersky.com
