Avast, a provider of digital security and privacy products, has found that globally, there has been a 51 percent increase in the use of spy and stalkerware since the lockdown in March until June, in comparison to January and February 2020. In India, since March Avast has protected over 4,000 users from apps capable of spying, mostly stalkerware, with the monthly average up 20 percent vs. the first two months of the year. Stalkerware is an unethical software that allows people to track someone’s location, access their personal photos and videos, intercept emails, texts and app communications such as WhatsApp and Facebook, as well as eavesdrop on phone calls and make covert recordings of conversations over the internet, without the target’s knowledge.
It is notable that among the entire range of spy and stalkerware, Avast has also observed a number of COVID-19-related apps designed to spy on users, which collected more information about its users than required to function.
Avast threat analysts have found three stalkerware apps in India that are named after India’s official Covid-19 app, Aarogya Setu, and use an icon looking like, or reminding of the official app’s icon. When downloaded, the official Aarogya Setu app gets installed along with the stalkerware app. The stalkerware apps use the original app to get approval from the user to allow the collection of sensitive information. To spy on the user, it then uses the AcessibilityService of Android to get various permissions and have the ability to – make phone calls, get SIM serial number, read contacts, read phone state, read and send text messages, record calls/audio, queries call log, access device location and ID. The apps can also hide their icon, making it hard for the victim to notice; also has the capability to mute the ringer.
Jaya Baloo, CISO, Avast said, “Stalkerware is a growing category of domestic malware with disturbing and dangerous implications. While spyware and infostealers seek to steal personal data, stalkerware is different: it steals the physical and online freedom of the victim. Usually installed secretly on mobile phones by so-called friends, jealous spouses, ex-partners, and even concerned parents, stalkerware tracks the physical location of the victim, monitors sites visited on the internet, text messages and phone calls, undermining a person’s individual liberty and online freedom.”
Avast has protected over 43,000 users globally from such malware since March 2020. Country specific data indicates 3,531 users have been targeted in the United States, 1,648 in France, and 3,048 in Brazil.
This growing digital threat identified by Avast is set against a backdrop of an increase in domestic violence during lockdown, called a “shadow epidemic” of the coronavirus by Phumzile Mlambo-Ngcuka, Executive Director of UN Women.
“Across the globe, it’s been reported that the number of domestic violence cases have consistently increased during lockdown, and that tallies with what we’re seeing in this digital threat. We’re committed to doing all that we can to protect our users from this rising threat.” Baloo added.
India’s National Commission for Women (NCW) has seen a more than two-fold rise in gender-based violence during the lockdown in India. Between 23 March and 16 April NCW registered 587 domestic violence complaints, a 45% increase from the previous 25 days. The Childline India helpline received more than 92,000 calls between 20–31 March, the start of India’s lockdown, asking for protection from abuse and violence.
