Hackers uncover new TheTruthSpy stalkerware victims: Is your Android device compromised?

TechCrunch details that TheTruthSpy, a widely deployed Android stalkerware operation run by Vietnam-linked 1Byte, has an unpatched security flaw (CVE-2022-0732) that allowed two hacking groups to access and exfiltrate tens of thousands of victims’ device identifiers and sensitive phone data; the operation continues to spy on clusters of users globally and has leaked large banks of stolen data despite some hosting and payment accounts being suspended.