{"id":58932,"date":"2025-07-06T20:10:13","date_gmt":"2025-07-06T20:10:13","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/stalkerware-firm-gets-scooped-by-sql-slinging-security-snoop\/"},"modified":"2025-07-06T20:10:13","modified_gmt":"2025-07-06T20:10:13","slug":"stalkerware-firm-gets-scooped-by-sql-slinging-security-snoop","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/stalkerware-firm-gets-scooped-by-sql-slinging-security-snoop\/","title":{"rendered":"Stalkerware firm gets scooped by SQL-slinging security snoop"},"content":{"rendered":"

Infosec In Brief<\/span> A security researcher looking at samples of stalkerware discovered an SQL vulnerability that allowed him to steal a database of 62,000 user accounts. <\/p>\n

Eric Daigle published a blog post<\/a> this week detailing how he found a piece of stalkerware he wasn’t familiar with, Catwatchful, and then quickly proceeded to pwn it into temporary oblivion. <\/p>\n

Stalkerware or spyware is a form of software used to track people’s computer activity. It is typically installed by parents, spouses, or employers with physical access to the user’s computer, and tends to be undetectable and very hard to remove. The number of stalkerware installations has been steadily on the rise<\/a>, even as it’s repeatedly been breached<\/a> by online vigilantes and security researchers. <\/p>\n