{"id":12092,"date":"2018-09-08T13:14:36","date_gmt":"2018-09-08T13:14:36","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/"},"modified":"2018-09-08T13:14:36","modified_gmt":"2018-09-08T13:14:36","slug":"gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/","title":{"rendered":"Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc"},"content":{"rendered":"
<\/div>\n

Roundup<\/strong> This week brought with it a Supermicro shoring up firmware security<\/a>, a North Korean hacking charge<\/a>, and a spying anti-adware macOS tool getting yanked by Apple<\/a> from its App Store. Elsewhere, we had\u2026<\/p>\n

BrokenType broken out with source code release<\/span><\/h3>\n

A software vulnerability probing tool called BrokenType had appeared in public on GitHub<\/a> for folks to use.<\/p>\n

Developed by Googler Mateusz Jurczyk \u2013 though it is not an official Chocolate Factory project \u2013 BrokenType lets you fuzz code that handles OpenType and TrueType fonts to find memory corruption errors can could be exploited to execut malicious software (such as the ones behind critical Microsoft patches<\/a>).<\/p>\n

Users can download the entire three-piece toolset directly from GitHub.<\/p>\n

Mac security foiled by… URLs<\/span><\/h3>\n

Apple security guru Patrick Wardle has detailed a recently spotted<\/a> campaign to commander and control macOS machines.<\/p>\n

Dubbed Windshift APT, the attack uses multiple exploits to infect Apple-powered computers mostly in the Middle East. One of those exploits abuses the way macOS passes URLs to applications to open.<\/p>\n

Wardle said that, just like the way an app can be assigned to open a specific file type, it can also be associated with a URL protocol. As soon as an application lands on a filesystem, it is parsed by the operating system, and if it declares, say, it can handle foo:\/\/<\/code> URLs, then macOS automatically registers it as a handler.<\/p>\n

That way, if you get someone to simply download an app \u2013 and not even run it \u2013 it can register itself for a custom protocol, and then be automatically activated when that protocol is invoked in a webpage. Thus, it is possible to install malware or spyware, if the user clicks OK in a popup to confirm they want to launch the special URL.<\/p>\n

Wardle recommends that users either switch to a browser that does not automatically open .zip archives of applications, such as Chrome, or at least turn off the \u201copen safe files after downloading\u201d option in Safari.<\/p>\n

Gmail users freak over FBI notification<\/span><\/h3>\n

A Reddit thread<\/a> has popped up in recent days with netizens upset about a notification they received from Google that the FBI had requested access to their messages.<\/p>\n

As it turns out, the notifications were likely the result of a 2017 investigation into a remote administration tool (RAT) known as Luminosity that lets the controller covertly spy on the activity of the PC on which the software is installed. It’s basically a utility that you sneak onto a victim’s computer, and use to snoop on them, and was sold on underground hacker forums. Luminosity\u2019s creator was convicted<\/a> in a US court earlier this year.<\/p>\n

As the Reddit users eventually worked out, the notifications were likely sent after the expiration of a one-year nondisclosure agreement placed on Google by the Feds, and, with that having lapsed, Gmail users were then sent a notification that the FBI had asked for their account info. The agents were quite possibly<\/a> after the messages of people who may have bought copies of Luminosity using their Gmail accounts. The FBI was able to obtain its customer database.<\/p>\n

The moral of the story: don\u2019t mess around with RATs. Especially ones sold on hacker forums and marketplaces.<\/p>\n

Egghead maps out exposed .Git repos<\/span><\/h3>\n

A Czech researcher has scanned the internet’s web servers to log the world\u2019s exposed Git repositories.<\/p>\n

Vladim\u00edr Smitka of Lynt Services said<\/a> he started the project first as a scan just for Czech sites, but eventually expanded it to a global project that took around four weeks to complete and ended up returning 390,000 web pages that had left the critical files exposed.<\/p>\n

Smitka said that locking down a site\u2019s Git repository is a critical security task that is all too often overlooked by developers.<\/p>\n

\u201cIf you use git to deploy your site, you shouldn’t leave the .git folder in a publicly accessible part of the site. If you already have it there for some reason, you need to ensure that access to the .git folder is blocked from the outside world,\u201d he explained.<\/p>\n

Smitka is advising developers to keep a close eye on files and scripts they upload via Git and make sure they lock down access to the files.<\/p>\n

Kink shame: Sex app bares passwords for all to see<\/span><\/h3>\n

Whiplr, a hookup app for kinksters, has been found to be awfully naughty when it comes to password security.<\/p>\n

An Engadget report<\/a> claimed the app\u2019s developer was storing user accounts and passwords in a backend database as plain text.<\/p>\n

\u201cShould hackers have gained access to this database, they could’ve potentially figured out the real identities of users either through the app itself or through other services where those credentials are identical,\u201d the blog noted.<\/p>\n

As you can imagine, most people on the site would not want their identities revealed to prudish family and peers, and even fewer would want to have their passwords in the hands of hackers. If you\u2019ve downloaded the app, you will probably want to make sure your password is unique and any personal information scrubbed.<\/p>\n

\n

Schneider Electric crash<\/span><\/h3>\n

Industrial control equipment maker Schneider Electric has fixed a remotely exploitable device-crashing flaw in its Modicon Controller.<\/p>\n

The CVE-2018-7789 vulnerability<\/a> can be abused by hackers to remotely disconnect Modicon M221 units from host networks simply by sending malformed packets. Obviously, a miscreant needs network access to the device to knacker it.<\/p>\n

Such an attack would leave an operator with “no way to view and control the physical processes on the OT [operational technology] network,\u201d according to Radiflow, the industrial control specialist that uncovered the bug. Attacked equipment would have to be powered off and on again to recover.<\/p>\n

“The recovery from such an attack would require a reboot of the attacked PLCs and physical access to the controllers, which would cause significant downtime to the ICS network,” Radiflow advised.<\/p>\n

Radiflow discovered and reported this vulnerability to Schneider Electric approximately two months ago, prior to its recent remediation. ICS-CERT\u2019s write-up<\/a> explained that “successful exploitation of this vulnerability could allow an unauthorised user to remotely reboot the device” alongside remediation advice.<\/p>\n<\/div>\n

Russian hacker extradited for massive financial fraud case<\/span><\/h3>\n

The US District Attorney\u2019s office in Manhattan, New York, said this week<\/a> it has secured the extradition of Russian national Andrei Tyurin, an alleged hacker wanted in connection with a string of attacks on financial companies.<\/p>\n

The DA claimed Tyurin was one of four hackers behind, among other shenanigans, the massive computer security breach<\/a> at JPMorgan that saw the details on roughly 80 million user accounts stolen back in 2014. Tyurin was also said to have behind a string of attacks on other financial firms and at least one breach of a business news site.<\/p>\n

\u201cAndrei Tyurin allegedly engaged in a long-running effort to hack into the systems of U.S. based financial institutions, brokerage firms and financial news publishers, all from the perceived safety of operating outside our borders,\u201d said FBI Assistant Director William Sweeney.<\/p>\n

\u201cAs alleged, his illegal acts included the historically largest theft of customer data from a U.S. financial institution.\u201d<\/p>\n

When he does reach the US and appears in court on September 25, Tyurin will be charged with computer hacking, wire fraud, conspiracy to commit computer hacking, conspiracy to commit wire fraud, identity theft, and violating the Unlawful Internet Gambling Enforcement Act. \u00ae<\/p>\n

Sponsored:<\/span> Following Bottomline\u2019s journey to the Hybrid Cloud<\/a><\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Mac APT unearthed and other infosec bits and bytes summarized just for you Roundup\u00a0 This week brought with it a Supermicro shoring up firmware security, a North Korean hacking charge, and a spying anti-adware macOS tool getting yanked by Apple from its App Store. Elsewhere, we had\u2026\u2026 READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":12093,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-12092","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"\nGits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-09-08T13:14:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"794\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc\",\"datePublished\":\"2018-09-08T13:14:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/\"},\"wordCount\":1247,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/\",\"name\":\"Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc.jpg\",\"datePublished\":\"2018-09-08T13:14:36+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc.jpg\",\"width\":1200,\"height\":794},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/","og_locale":"en_US","og_type":"article","og_title":"Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-09-08T13:14:36+00:00","og_image":[{"width":1200,"height":794,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc","datePublished":"2018-09-08T13:14:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/"},"wordCount":1247,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/","url":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/","name":"Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc.jpg","datePublished":"2018-09-08T13:14:36+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/09\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc.jpg","width":1200,"height":794},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/gits-exposed-kinky-app-devs-spanked-feds-spy-on-spyware-buyers-etc\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Gits exposed, kinky app devs spanked, Feds spy on spyware buyers, etc"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/12092","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=12092"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/12092\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/12093"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=12092"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=12092"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=12092"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}