FTC Reinforces Ban on Stalkerware Founder Scott Zuckerman, Citing Repeated Violations
The Federal Trade Commission (FTC) has upheld its ban against Scott Zuckerman, the founder of notorious stalkerware company SpyFone, demonstrating a firm stance against the insidious practice of domestic surveillance. This decision stems from a pattern of disregard for previous legal orders and a continued effort to profit from invasive technology.
The 2018 Data Breach: A Wake-Up Call
The initial FTC action against Zuckerman followed a significant security lapse in 2018. A researcher discovered an exposed Amazon S3 bucket linked to SpyFone, revealing a treasure trove of deeply personal data. This included:
* Selfies
* Text messages
* Chat logs
* Audio recordings
* Contacts
* Hashed passwords
* Location data
The breach impacted over 3,600 phones wiht SpyFone installed, exposing the data of at least 2,208 customers and containing potentially thousands of photos and audio files. 44,109 unique email addresses were also compromised,highlighting the widespread risk.
Circumventing the Ban: The Rise of SpyTrac and Support King
Despite a 2021 FTC order prohibiting Zuckerman from engaging in similar business practices, evidence surfaced less than a year later suggesting he was already operating another stalkerware company. TechCrunch reported in 2022 on SpyTrac, which was found to be run by developers directly connected to Support King – a clear attempt to bypass the FTC’s restrictions.
Further examination revealed that SpyTrac’s data included records from SpyFone (which Zuckerman was ordered to delete) and access keys to the cloud storage of OneClickMonitor, another of his stalkerware applications. This demonstrated a purposeful effort to continue profiting from harmful surveillance technology.
Expert Reaction & The Pattern of Neglect
“Mr. Zuckerman was clearly hoping that if he laid low for a few years, everyone would forget about the reasons why the FTC issued a ban not only against the company, but against him specifically,” stated Eva Galperin, director of cybersecurity at the Electronic Frontier foundation. Her assessment underscores the calculated nature of Zuckerman’s actions.
Galperin added that the revelations surrounding Zuckerman’s continued involvement ”suggests that Zuckerman did not learn his lesson.” This pattern of behavior raises serious concerns about his commitment to respecting user privacy and complying with legal regulations.
The Broader Threat of Stalkerware
Stalkerware apps enable individuals to secretly monitor the activity on another person’s device. This can facilitate abusive and potentially illegal behavior. The industry as a whole has a dismal security record.
Over the past eight years, TechCrunch has documented at least 26 instances of stalkerware companies being hacked or leaving sensitive data exposed online. This repeated failure to protect data impacts both the individuals purchasing these apps and the people being spied upon.
If you believe you or someone you no is a victim of stalkerware, here are resources to help:
* Contact TechCrunch securely:
* Signal: +1 917 257 1382
* Telegram/Keybase: @lorenzofb
* Email: [email protected]
* National Domestic Violence Hotline: 1-800-799-SAFE (7233) or https://www.thehotline.org/
* Digital Defense Fund: https://digitaldefensefund.org/
This ongoing issue highlights the urgent need for stronger regulations and increased awareness surrounding the dangers of stalkerware.The FTC’s continued enforcement action against Scott Zuckerman sends a clear message: profiting from the exploitation and surveillance of others will not be tolerated.
Keep reading