TheTruthSpy stalkerware, still insecure, still leaking data

Malwarebytes reports that the stalkerware app TheTruthSpy (and numerous clones) continues to collect highly sensitive data and remains vulnerable to an unpatched IDOR (CVE-2022-0732). Research and hacker groups recently re-discovered and exploited this flaw, exposing victim data (including device IMEIs and photos) across multiple regions; the article warns users, lists affected clone apps, and provides detection/removal guidance.