More vulnerable stalkerware victims’ data exposed in new TheTruthSpy flaw

A security researcher demonstrated to TechCrunch that TheTruthSpy’s Android stalkerware servers have a flaw allowing anyone to reset any account password and take over victims’ stored surveillance data; the report details the app’s invasive data collection (calls, texts, GPS, messaging activity, audio, keystrokes), its history of security issues and data leaks, the vendor’s response, and provides advice and tools for detecting and removing stalkerware.