TEMPE, Ariz. and PRAGUE, Mar. 14, 2023 – The risk of encountering stalkerware on a mobile device increased 130% in India over a three-year period according to the latest threat telemetry from Avast, a leading digital security and privacy brand of Gen™ (NASDAQ: GEN). Stalkerware, a category of malware and form of tech abuse, steals the physical and online freedom of the targeted person by covertly tracking their location and monitoring smartphone activity, including websites visited, text messages and phone calls.
"The growth we’re seeing in stalkerware is a huge concern,” said Jakub Vavra, Threat Operations Analyst at Avast. “Stalkerware is often installed secretly on mobile phones by abusive spouses, ex-partners, so-called friends or concerned parents, and has the capacity to inflict serious physical and psychological harm on those affected. This is not only about stealing personal data, there are also tangible implications concerning the safety of the individual targeted.”
Over the past three years, Threat Researchers at Avast, which is part of the Coalition Against Stalkerware, have discovered a diverse range of mobile applications intended for non-consensual stalking and have worked with app stores such as Google Play to facilitate their removal. Recently, their analysis has found that child surveillance apps that can remotely control affected devices and stay hidden have become some of the most prevalent forms of stalkerware, and are often misused for monitoring calls, SMS, internet activity and social media, recording audio and video, taking photos or screenshots of a person’s phone, and tracking live locations. Another common type of stalkerware are apps that market themselves as lost or stolen device trackers. Once installed on a device they either hide themselves completely or present themselves as Notes applications to evade detection from the unsuspecting phone owner. The stalker can control these apps remotely and carry out similar malicious activity.
“Avast detects and blocks stalkerware with a combination of automation and human intervention to ensure an optimal level of protection from new and evolving threats," continued Vavra. “We’ll continue to do all we can to protect people’s liberties and their online freedoms from this growing problem.”
“Stalkerware is an invasive monitoring tool abusers use to perpetrate stalking, harassment, and other forms of violence and abuse. National Network to End Domestic Violence (NNEDV) is deeply concerned about the significant increase in the use of stalkerware and the dangerous implications for survivors domestic and dating violence and sexual assault,” said Erica Olsen, Senior Director of Safety Net Project at NNEDV. “Our Safety Net Project conducted an assessment of service providers documenting that the most common types of technology abuse – harassment, limiting access to tech, and surveillance – all increased during the pandemic. We are grateful for Gen’s partnership and dedication to addressing stalkerware and survivor safety.”
Below is some guidance from Avast Threat Researchers to help people identify the signs of potential stalkerware applications and how to protect themselves from them:
The data included in this report was collected from Avast’s threat detection network and represents stalkerware detected and blocked on mobile devices between January 2020 and December 2022.
“Risk” refers to the risk ratio which is defined as the ratio of people targeted by stalkerware and actively protected by Avast in the given country and month relative to the total number of active users in the given country and month.
Avast Threat Researchers found the number of people targeted by stalkerware in India grew from an average rate of 40 per 100,000 in 2020 to 92 per 100,000 in 2022.