Undetectable Android Spyware Backfires, Leaks 62,000 User Logins - SecurityWeek

A vulnerability in Catwatchful, an Android spyware posing as parental control software, exposed the credentials of over 62,000 customer accounts. The spyware, marketed as undetectable, allows real-time monitoring of a victim’s device and access to personal information. The exposed information, including plaintext logins and passwords, can be used to take over any account on the service.