{"id":16473,"date":"2019-10-01T08:10:08","date_gmt":"2019-10-01T16:10:08","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/10\/01\/news-10213\/"},"modified":"2019-10-01T08:10:08","modified_gmt":"2019-10-01T16:10:08","slug":"news-10213","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/10\/01\/news-10213\/","title":{"rendered":"For Cybersecurity and Domestic Violence Awareness months, we pledge to fight stalkerware"},"content":{"rendered":"<p><strong>Credit to Author: Wendy Zamora| Date: Tue, 01 Oct 2019 15:00:14 +0000<\/strong><\/p>\n<p>Starting today, two hallmark holidays are upon us. No, it\u2019s not Halloween and Thanksgiving. It\u2019s both <a rel=\"noreferrer noopener\" aria-label=\"Cybersecurity Awareness Month (opens in a new tab)\" href=\"https:\/\/staysafeonline.org\/ncsam\/about-ncsam\/\" target=\"_blank\">Cybersecurity Awareness Month<\/a> and <a href=\"https:\/\/www.breakthecycle.org\/blog\/it%E2%80%99s-national-domestic-violence-awareness-month\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"Domestic Violence Awareness Month (opens in a new tab)\">Domestic Violence Awareness Month<\/a>.<\/p>\n<p>It\u2019s no coincidence these two awareness campaigns overlap. What were once seen as separate realities\u2014the physical and the digital\u2014are increasingly blurred as our offices, schools, and hospitals move from paper to screen. Our homes are operationally Internet-connected, and our personal and professional relationships are colored by the way we interact online. <\/p>\n<p>Through the ubiquity of mobile devices and social media, an argument can be made that we\u2019re already living in an augmented reality. And there is no better evidence than the real-life fallout experienced by victims of technological abuse\u2014cyberattacks lead to identity theft and empty bank accounts, frozen assets for businesses, or worse, <a href=\"https:\/\/blog.malwarebytes.com\/ransomware\/2019\/08\/ransomware-continues-assault-against-cities-and-businesses\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"whole cities shutting down (opens in a new tab)\">whole cities shutting down<\/a>. <\/p>\n<p>But no line is as blurry as the one toed by domestic violence abusers, who use software called <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/blog.malwarebytes.com\/glossary\/stalkerware\/\" target=\"_blank\">stalkerware<\/a> to leverage their partner\u2019s digital footprint for physical control. And it\u2019s stalkerware that we\u2019re here to talk about\u2014and hopefully eradicate\u2014as we kick off a month of continued awareness and action. <\/p>\n<p>In honor of Cybersecurity and Domestic Violence Awareness months, then, we renew our pledge to fight stalkerware. And we encourage other vendors to step up their efforts so we can work together to stomp out this scourge on the Internet once and for all.<\/p>\n<h3>What is stalkerware?<\/h3>\n<p>Stalkerware is software that was created to monitor a person\u2019s activities on their computer or, more commonly, their mobile device\u2014without that person\u2019s knowledge. Though often advertised as <a href=\"https:\/\/blog.malwarebytes.com\/stalkerware\/2019\/07\/parental-monitoring-apps-how-do-they-differ-from-stalkerware\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">a tool for parents<\/a> to track their children\u2019s activities, these apps are more commonly used for nefarious purposes. <\/p>\n<p>Stalkerware applications can track unsuspecting victims\u2019 locations, record calls, view text messages, pry into locally-stored photos, and rifle through web-browsing activity, all while hidden from view. To highlight, here is a list of information that stalkerware can gather\u2014all of which can be sent to a remote user\u2014as well as activities an abuser can conduct on a user\u2019s device without their knowing or consent:<\/p>\n<ul>\n<li>Exact geographic location via GPS <\/li>\n<li>IP address of device<\/li>\n<li>SMS message history<\/li>\n<li>Call history, including call length<\/li>\n<li>Browser history<\/li>\n<li>Contacts, including phone numbers and email addresses<\/li>\n<li>Email account credentials<\/li>\n<li>Email content from all accounts accessed from device<\/li>\n<li>Photos, videos, and audio recorded and stored on the device or connected cloud account <\/li>\n<li>Can take pictures with front\/rear camera <\/li>\n<li>Can record audio via device mic<\/li>\n<li>Can remotely turn on and off device<\/li>\n<\/ul>\n<p>Malwarebytes detects stalkerware applications through the longtime mobile threat category <em>monitor<\/em>, which is a subset of potentially unwanted programs (PUPs). Because some of these stalkerware applications can be used \u201clegitimately,\u201d they are currently flagged as programs users might not want on their phones. However, once presented with what stalkerware can do (or once gaining knowledge of a program that\u2019s been installed on their device without consent), many users will likely want to delete these apps.<\/p>\n<p>These applications represent real-life threats to domestic abuse victims, who can readily be tracked down (along with their children), even when hidden in shelters.<\/p>\n<h3>How to fight stalkerware<\/h3>\n<p>Historically, the cybersecurity industry has turned a blind eye to stalkerware. Because many of these applications are available on legitimate platforms (including iTunes and the Google Play Store) and marketed as harmless child-monitoring software, an argument could be made for their valid existence.<\/p>\n<p>But reaching back <a href=\"https:\/\/blog.malwarebytes.com\/android\/2019\/06\/mobile-stalkerware-a-long-history-of-detection\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">more than five years<\/a>, Malwarebytes has drawn a hard line in the sand about its tolerance for stalkerware. We simply won\u2019t stand for it. We blocked it years ago, doubled our intelligence and detection capabilities back in June, and continue to press for awareness and action from advocacy groups, shelters, law enforcement, and other vendors.<\/p>\n<p>So what can other vendors and individuals do to step up their efforts to fight stalkerware? For starters, many other antivirus companies don&#8217;t detect monitoring or stalkerware applications at all. Coming up with rules for stalkerware detection and adding them to their product databases can help users on any security platform better protect against these threats.<\/p>\n<p>Second, spreading awareness about these types of apps and how to protect against them is key. Users should Google and Google some more to learn all they can on stalkerware. We&#8217;ve linked many of our own articles in this blog, for starters. <\/p>\n<p>Advocates should listen closely to their victims who are being tracked through their phones\u2014does it sound like they have a stalkerware problem? If so, <a rel=\"noreferrer noopener\" aria-label=\"download security apps (opens in a new tab)\" href=\"http:\/\/www.malwarebytes.com\/android\" target=\"_blank\">download security apps<\/a> that can scan for and remove these threats and other forms of surveillance, including spyware.<\/p>\n<p>For other ideas on what cybersecurity companies could do to fight stalkerware, take a look at what we&#8217;ve done so far in 2019: <\/p>\n<ul>\n<li>Analyzed more than 2,500 samples of programs that had been flagged in research algorithms at potential monitoring\/tracking apps, spyware, or stalkerware<\/li>\n<li>Grown our database of known stalkerware to include over 100 applications that no other vendor detects and more than 10 that are, as of presstime, still on Google Play<\/li>\n<li>Developed a set of awareness blogs for domestic abuse survivors and advocates on <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/blog.malwarebytes.com\/stalkerware\/2019\/07\/helping-survivors-of-domestic-abuse-what-to-do-when-you-find-stalkerware\/\" target=\"_blank\">what to do if they have stalkerware<\/a> on their phones and <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/blog.malwarebytes.com\/privacy-2\/2019\/08\/data-and-device-security-domestic-abuse-survivors\/\" target=\"_blank\">how to protect their data<\/a><\/li>\n<li>Spoken with local nonprofit and advocacy groups about stalkerware and how to protect against it, as well as shared intel with local law enforcement and attorneys general<\/li>\n<li>Presented at the National Network to End Domestic Violence\u2019s annual Tech Summit, with information on protecting both domestic violence survivors and the advocates who are with them in the field<\/li>\n<li>Released <a rel=\"noreferrer noopener\" aria-label=\"Malwarebytes Browser Guard (opens in a new tab)\" href=\"https:\/\/blog.malwarebytes.com\/malwarebytes-news\/2019\/09\/browser-guard-combats-privacy-abuse-tracking-clickbait-and-scammers\/\" target=\"_blank\">Malwarebytes Browser Guard<\/a>, which protects against tracking applications and extensions used on browsers<\/li>\n<li>Partnered with other vendors and domestic violence awareness advocates on creating avenues for intel-sharing, definition of the threat, and underscoring that this issue is deeper than owning proprietary signatures and detections<\/li>\n<\/ul>\n<h3><strong>More to come<\/strong><\/h3>\n<p>While we\u2019ve committed to kicking stalkerware\u2019s ass over the last five plus years, our work is far from over. Over the next month, we plan to follow up with articles on how individuals and organizations can do their part to better understand this threat and the way it can be used to endanger people\u2019s safety. We\u2019ll also continue with local and national outreach efforts, hoping to both equip advocates with technological understanding and learn from victims themselves what else can be done to support their needs.<\/p>\n<p>At the center of themes regarded as important and relevant today\u2014privacy, technological autonomy, and civic responsibility\u2014sits stalkerware and the cybersecurity community\u2019s response to it. We must band together to squash this threat instead of fluffing it off in favor of \u201csexier\u201d and scarier-sounding malware. We must pay more than lip service to defending users from physical harm, instead offering solace and protection for those in need. And we must use the full capabilities of our technology to keep users safe from stalkerware, even if it doesn\u2019t directly impact us.<\/p>\n<p>We know what we\u2019ll be doing at Malwarebytes to fight stalkerware. We hope you\u2019ll join us in the fight. <\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/stalkerware\/2019\/10\/cybersecurity-domestic-violence-awareness-month-fight-stalkerware\/\">For Cybersecurity and Domestic Violence Awareness months, we pledge to fight stalkerware<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/stalkerware\/2019\/10\/cybersecurity-domestic-violence-awareness-month-fight-stalkerware\/\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Wendy Zamora| Date: Tue, 01 Oct 2019 15:00:14 +0000<\/strong><\/p>\n<table cellpadding='10'>\n<tr>\n<td valign='top' align='center'><a href='https:\/\/blog.malwarebytes.com\/stalkerware\/2019\/10\/cybersecurity-domestic-violence-awareness-month-fight-stalkerware\/' title='For Cybersecurity and Domestic Violence Awareness months, we pledge to fight stalkerware'><img src='https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2019\/09\/shutterstock_503921293.jpg' border='0'  width='300px'  \/><\/a><\/td>\n<\/tr>\n<tr>\n<td valign='top' align='left'>Starting today, two hallmark holidays are upon us. No, it\u2019s not Halloween and Thanksgiving. It\u2019s both Cybersecurity Awareness Month and Domestic Violence Awareness Month. It\u2019s no coincidence these two awareness campaigns overlap. What were once seen as separate realities\u2014the physical and the digital\u2014are increasingly blurred as our offices, schools, and hospitals move from paper to&#8230;<\/p>\n<p>Categories: <\/p>\n<ul class=\"post-categories\">\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/stalkerware\/\" rel=\"category tag\">Stalkerware<\/a><\/li>\n<\/ul>\n<p>Tags: <a href=\"https:\/\/blog.malwarebytes.com\/tag\/browser-guard\/\" rel=\"tag\">Browser guard<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/cyberstalking\/\" rel=\"tag\">cyberstalking<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/domestic-violence\/\" rel=\"tag\">domestic violence<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/domestic-violence-awareness-month\/\" rel=\"tag\">domestic violence awareness month<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/domestic-violence-victims\/\" rel=\"tag\">domestic violence victims<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/monitoring-apps\/\" rel=\"tag\">monitoring apps<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/national-cyber-security-awareness-month\/\" rel=\"tag\">national cyber security awareness month<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/national-cybersecurity-awareness-month\/\" rel=\"tag\">national cybersecurity awareness month<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/ncsam\/\" rel=\"tag\">NCSAM<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/privacy\/\" rel=\"tag\">privacy<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/spyware\/\" rel=\"tag\">spyware<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/stalkers\/\" rel=\"tag\">stalkers<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/stalkerware\/\" rel=\"tag\">stalkerware<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/tracking-apps\/\" rel=\"tag\">tracking apps<\/a><\/p>\n<table width='100%'>\n<tr>\n<td align=right>\n<p><b>(<a href='https:\/\/blog.malwarebytes.com\/stalkerware\/2019\/10\/cybersecurity-domestic-violence-awareness-month-fight-stalkerware\/' title='For Cybersecurity and Domestic Violence Awareness months, we pledge to fight stalkerware'>Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/stalkerware\/2019\/10\/cybersecurity-domestic-violence-awareness-month-fight-stalkerware\/\">For Cybersecurity and Domestic Violence Awareness months, we pledge to fight stalkerware<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[22979,20527,2296,23100,23101,23102,19658,15355,15497,5897,10443,23103,19409,23104],"class_list":["post-16473","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-browser-guard","tag-cyberstalking","tag-domestic-violence","tag-domestic-violence-awareness-month","tag-domestic-violence-victims","tag-monitoring-apps","tag-national-cyber-security-awareness-month","tag-national-cybersecurity-awareness-month","tag-ncsam","tag-privacy","tag-spyware","tag-stalkers","tag-stalkerware","tag-tracking-apps"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/16473","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=16473"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/16473\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=16473"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=16473"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=16473"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}