Ankura CTIX FLASH Update - July 8, 2025

Malware Activity

The Rising Tide of Covert Mobile Surveillance and Security Breaches

The Android spyware campaign that aimed to covertly monitor users by exploiting vulnerabilities and employing undetectable malware design to evade detection ultimately backfired when security researchers uncovered their operation. Then the researchers revealed that approximately 62,000 user logins and sensitive data had been compromised. Additionally, a security researcher, Eric Daigle, uncovered a critical SQL injection vulnerability in the stalkerware platform Catwatchful, which allowed him to access and extract a database containing 62,000 user accounts, including administrative credentials. Catwatchful is marketed as an undetectable spyware kit used predominantly by individuals seeking covert monitoring. Despite widespread breaches of similar software, it continues to operate. CTIX analysts will continue to report on the latest malware strains and attack methodologies.