Smart home camera hijacking, baby monitor hacks, and phone stalkerware¶

Discovering that a stranger is speaking through your child's Wi-Fi baby monitor, watching your living room through an indoor security camera, cycling your smart door locks and thermostat remotely, or tracking every message and GPS movement on your smartphone through hidden stalkerware is an immediate personal safety and privacy emergency. Smart home and mobile surveillance incidents fall into two distinct categories that require completely different responses: opportunistic remote attacks by external hackers using leaked passwords ("credential stuffing"), and targeted technology-facilitated abuse by a current or former intimate partner, roommate, or landlord who once had physical access to your home or devices.

If an external stranger hijacked a smart camera or baby monitor, cutting power to the device and rotating your cloud and Wi-Fi credentials stops the intrusion immediately. However, if you suspect a jealous partner, ex-partner, or domestic abuser installed stalkerware ("spouseware") on your phone or retains secret administrator access to your home locks, cameras, or connected car, abruptly wiping the software or changing shared passwords can immediately alert the abuser and trigger a dangerous escalation in physical violence. Safety planning from an unmonitored device must always come first.

Kino kikole kati¶

1. Unplug hijacked indoor cameras and baby monitors from the wall outlet immediately: Do not rely on turning the camera off inside a smartphone app. Pull the physical power cord out of the wall outlet and remove any backup batteries so the lens, microphone, and speaker are completely dead.
2. Preserve brief forensic evidence before resetting if safe to do so: Using a separate phone, take a quick photo or video of the camera flashing, the app's Connected Devices / Login History screen, or unfamiliar administrator accounts, and write down the exact minute the voice or unauthorized action occurred so your router logs and the manufacturer's cloud logs can be correlated.
3. Assess whether the intruder is a stranger or someone you know (Escalation Warning): If a former partner, spouse, roommate, or landlord ever lived in the home, knew your Wi-Fi password, or held your unlocked phone, assume they will receive an instant push notification the moment you revoke their access or remove stalkerware. Read the domestic safety section below before deleting anything.
4. Disconnect your home Wi-Fi router if smart locks, garage doors, or thermostats are being manipulated: Unplug the power cable from your Wi-Fi router and modem to sever all remote cloud command channels instantly, then operate your deadbolts and garage door manually using the physical release lever until you factory-reset the devices.
5. Use a completely clean, unmonitored device to change passwords and seek help: Never research stalkerware removal, domestic violence shelters, or legal orders on a phone or laptop you suspect is monitored. Use a library computer, a trusted friend's phone, a workplace desktop, or a cheap prepaid burner phone purchased with cash and kept on cellular data away from your home Wi-Fi.
6. Enable phishing-resistant Multi-Factor Authentication (MFA) and click "Sign Out of All Devices" on your primary email and smart home cloud accounts: From a clean device, change the password on your primary email account first, then change the password on your Ring, Nest, Arlo, Wyze, Eufy, Apple Home, Google Home, or Amazon Alexa account, enable two-factor authentication, and revoke all active sessions and shared household users.

flowchart TD
    A["Suspected Camera Hijack, Smart Home Manipulation, or Phone Stalkerware"] --> B{"Who Is the Suspected Intruder?"}
    B -- "External Stranger / Opportunistic Hacker" --> C["Ggyako Cameras ez'omunda & Baby Monitors Okuva ku Wall Power Amangu"]
    C --> D["Yingira Mu Smart Home App Okuva mu Clean Device & Screenshot Ebyafaayo by'okuyingira"]
    D --> E["Reset Ekigambo ky'okuyingira ekya Email Ekisookerwako + Ekigambo ky'Ekire kya Smart Home & Enable MFA"]
    E --> F["Factory Reset Ebikozesebwa mu IoT Ebikoseddwa, Okulongoosa Firmware, n'okugenda ku Guest/IoT Wi-Fi VLAN"]
    B -- "Omubeezi aliwo kati oba eyaliwo, Roommate, oba Stalker" --> G["STOP: Tosazaamu Stalkerware oba Okusazaamu Okuyingira N'okutuusa kati (Risk of Escalation Alert)"]
    G --> H["Kozesa Ekyuma Ekitalondoolebwa (Essimu ya Mukwano, PC y’Etterekero, oba Essimu Esasulwa mu Nsimbi) okutuukirira Abawagira Obukuumi"]
    H --> I["Okubala Olukusa lwa iOS / Android, iCloud / Google Account Sync, ne Apps z'emmotoka eziyungiddwa"]
    I --> J{"Mwetegefu okufuluma nga tolina bulabe oba Olina Poliisi / Restraining Order Protection?"}
    J -- "Yee" --> K["Factory Reset Router, Sazaamu Shared Home/Car Access, era okyuse oba DFU-Wipe Essimu"]
    J -- "Nedda" --> L["Kuuma Decoy Normal Activity ku Monitored Phone Nga Okozesa Secret Clean Phone for Exit Plan"]

Ekitundu 1: Okuwamba kkamera y'obukuumi munda ne Wi-Fi baby monitor¶

Eddoboozi ly’omuntu gw’otomanyi bwe lyogera mu bwangu nga liyita mu kifaananyi ekilondoola abaana mu nnasale oba kkamera y’obukuumi ey’omunda eya pan-tilt etandika okwekulukuunya ku bwayo okukugoberera emitala w’ekisenge, ekintu ekyo kiba kimenya nnyo. Wabula mu misango egisukka mu 95 ku buli 100 egyaloopebwa egy'abakozesa, omulumbaganyi teya "hack" mayengo ga leediyo agaali gakuumibwa ebweru w'ennyumba yo; mu kifo ky’ekyo, baayingira butereevu ku mukutu gwa kkamera yo nga bakozesa ekigambo ky’okuyingira ekyafulumira mu kumenya data y’omukutu ogutaliiko kakwate.

Engeri abalumbaganyi gye bawamba kkamera ezigezi n’okulondoola abaana¶

Okutegeera ekkubo lyennyini ery’ekikugu kikutegeeza okufuga kw’ebyokwerinda ki okwalemererwa:

1. Okuteeka ebiwandiiko ku Akawunti za Kkamera ez’Ekire (Ebisinga Okutera): Singa wakozesa endagiriro ya email n’ekigambo ky’okuyingira kye kimu ku pulogulaamu ya kamera entegefu (nga Ring, Nest, Wyze, Arlo, Blink, oba Eufy) gye wakozesanga emabegako ku mukutu gw’ebyamaguzi, emizannyo, oba forum ogwamenyeddwa, bots z’abamenyi b’amateeka ez’obwengula zigezesa obukadde n’obukadde bwa email-and-password pairs ezifulumye ku smart camera login servers. Bot bw’emala okufuna hit, ebiwandiiko ebikakasa bitundibwa ku mikutu gy’abamenyi b’amateeka nga ba voyeurs ne trolls bayingira butereevu mu live camera stream yo ne banyiga button ya microphone eya "Two-Way Talk".
2. Exposed UPnP Port Forwarding and Default Passwords on IP Cameras: Kkamera z’omukutu enkadde oba eza bulijjo (RTSP/ONVIF IP cameras ne Foscam-style monitors) zitera okusindikibwa n’erinnya ly’omukozesa n’ekigambo ky’okuyingira ekisookerwako (nga admin / admin oba admin / 12345) era kozesa Universal Plug and Play (UPnP) okuggulawo otomatika omukutu oguyingira ku router yo ey’awaka (Port 80, . Port 554, oba Port 8000). Yingini z’okunoonya ebyuma ebiyungiddwa ku yintaneeti (nga Shodan oba Censys) ziwandiika ku miryango gino egy’olubeerera mu ngeri ey’otoma, ne kisobozesa omuntu yenna ali ku yintaneeti okulaba emmere etakakasiddwa.
3. Shared "Household Member" oba "Guest" Links: Abaali baagalana, abalabirira abaana, abatambuza embwa, oba abapangisa abaaliwo emabegako abaali bayitiddwa nga "Shared User" munda mu smart home app yo bakuuma live camera ne basiba okuyingira ekiseera ekitali kigere okuggyako nga kisaziddwamu mu bulambulukufu, ne bw'oba okyusizza master password yo.
4. Local RF / FHSS Interception on Non-Wi-Fi Monitors: Non-Wi-Fi baby monitors ezikozesa analog 900 MHz / 2.4 GHz radio signals enkadde oluusi zisobola okulonda cross-talk okuva ku ssimu ya muliraanwa etaliiko waya oba baby monitor mu mita 100 ku 300 (fuuti 330 ku 985). Ebintu eby’omulembe DECT 6.0 oba FHSS (Frequency-Hopping Spread Spectrum) eby’omulembe ebitali bya Wi-Fi bikwata ensirifu n’okubuuka frequency emirundi ebikumi n’ebikumi buli sikonda era tebisobola kuyingizibwa okuva ku yintaneeti n’akatono.

Olukalala lw’okukebera amangu kkamera eziwambiddwa n’ebifo ebiyitibwa smart home hubs¶

• Eddaala 1: Sika pulagi y’amasannyalaze ag’omubiri: Ggyako adaapu y’amasannyalaze ga USB-C oba mu ppipa okuva emabega wa buli kkamera ey’omunda ne baby monitor. Kkamera bw’eba erina bbaatule ya lithium ey’omunda, kwata bbaatuuni y’amasannyalaze ag’omubiri okumala sekondi 15 okutuusa lw’egwa wansi, oba kkamera teeka ng’etunudde wansi munda mu ddulaaya oba kabokisi enzigale ng’ozingiddwa mu katambaala akanene olwo lenzi n’akazindaalo byombi bibeere nga bisirise nga bw’onyweza akawunti zo.
• Eddaala 2: Kebera olukalala lwa app olwa Authorized Devices and Shared Users: Nga tonnasazaamu kyuma ku akawunti yo, ggulawo Account Settings > Security > Authorized Client Devices oba Login Activity ya app ya camera era okube ekifaananyi ekiraga endagiriro za IP zonna ezitamanyiddwa, ebibuga, oba ebika by’essimu (okugeza, essimu etamanyiddwa "iPhone 15 in Frankfurt" oba "Web Browser in Moscow"). Ekiddako, ggulawo Shared Users / Household Members era oggyewo buli muntu gw’oteesiga ddala.
• Eddaala 3: Kyusa password yo eya email enkulu, olwo password yo eya camera cloud: Olw'okuba omulumbaganyi alina obuyinza okuyingira mu email inbox yo asobola okumala okukwata emails za "Reset Password", sooka onyweze akawunti yo eya email enkulu n'ekigambo eky'enjawulo eky'ennukuta 20 n'okukakasa okw'ensonga bbiri, olwo okyuse password yo ey'omutunzi wa kkamera okudda ku password ey'enjawulo ddala.
• Eddaala 4: Okukaka Mandatory Two-Factor Authentication (2FA): Ssobozesa 2FA munda mu camera app yo nga okozesa app ekakasa (nga Google Authenticator, Ente Auth, oba 1Password) okusinga obubaka bwa SMS we buwagirwa. Okutandika 2FA n'okuddamu okuteekawo ekigambo kyo eky'okuyingira mu bujjuvu kiwaliriza seva y'ekire okufuula obubonero bwonna obw'okutambula obukola mu ddakiika ntono.
• Eddaala 5: Nywa ku physical hardware Factory Reset pinhole ku camera: Plug camera back in nga okwata wansi recessed hardware Reset button okumala sekondi 10 ku 15 okutuusa nga ettaala eraga eyaka era voice prompt ekakasa factory reset. Ddamu okugatta kkamera ku akawunti yo, oteekemu byonna ebitannaba ku Firmware Updates, era olemese Two-Way Audio / Microphone Recording munda mu nteekateeka za kkamera yonna ey’omunda nga okukubaganya ebirowoozo mu ddoboozi tekyetaagisa nnyo.

Ekitundu 2: Smart locks, thermostats, emizindaalo, n’emmotoka eziyungiddwa mu nkaayana z’awaka¶

Mu kuggala landiroodi n’abapangisa, okusasika okutaataaganyizibwa, n’emisango gy’okutulugunyizibwa mu maka, enkola z’amaka amagezi (Amazon Alexa, Google Home, Apple HomeKit, Samsung SmartThings) ne pulogulaamu za ssimu z’emmotoka eziyungiddwa (Tesla, FordPass, MyChevrolet, Toyota, Hyundai Bluelink, Subaru Starlink, Mercedes me) zitera okuteekebwamu ebyokulwanyisa olw’okutulugunyizibwa okuva ewala, okubulwa otulo, ne okulondoola kwa GPS mu kiseera ekituufu.

Okunyweza ebizibiti ebigezi, enzigi za galagi, ne thermostats¶

Singa amataala go gaaka ku ssaawa 3:00 ez’oku makya, thermostat yo elinnya mangu okutuuka ku diguli 32 Celsius (diguli 90 Fahrenheit) oba okukka okutuuka ku diguli 10 (diguli 50), oba smart deadbolt yo yeesumulula:

1. Ggyayo bbaatule y’omunda mu smart deadbolt yo: Buli smart deadbolt (Schlage, Yale, August, Kwikset, Aqara, Level) ekola ku bbaatule za AA 4 ku 8 oba lithium pack eddaamu okucaajinga esangibwa wansi w’ekibikka munda eky’okukyusa engalo ensajja munda mu nnyumba yo. Serengeta ku kibikka eky’omunda oggyemu bbaatule. Awatali maanyi ga bbaatule, chip ya leediyo ebeera ku mutimbagano ebitundu 100 ku 100 era tesobola kusumululwa app yonna, PIN code, oba ekiragiro kya Wi-Fi, ate ekisumuluzo kyo eky’ekyuma ekirabika n’okukyusa engalo ensajja mu ngeri ey’omunda bikyagenda mu maaso n’okukola mu ngeri eya bulijjo.
2. Ssika omuguwa ogw’okusumulula mu ngeri ey’amangu ku kisumuluzo kyo eky’oluggi lwa galagi ekigezi: Singa omuntu atalina lukusa asobola okuyingira mu kifuga galagi yo eya MyQ, Genie Aladdin, oba Meross, ggyamu omutala omugezi ku mudumu ogufuluma ku bbugwe oba ssika omuguwa omumyufu ogw’okusumulula mu bwangu oguwaniridde ku luguudo lw’akagaali k’oluggi lwa galagi n’oserengesa ekyuma ekirabika eky’omunda ekya galagi side-bolt shut.
3. Ggyako faceplate ya smart thermostat okuva ku bbugwe: Smart thermostats (Google Nest, Ecobee, Honeywell Home) zisika ku baseplate ya waya ya voltage entono ku bbugwe. Kwata bulungi yuniti ya thermostat era ogisika butereevu ku ppini za bbugwe okuyimiriza okukozesa ebbugumu okuva ewala okutuusa lw’onoosobola okuddamu okuteeka yuniti mu kkolero wansi wa Settings > Reset > Account Connection / All Settings n’ogisiba ku email account empya ddala.
4. Okubala ebitabo bya Smart Home Hub "Home Members" n'abayambi b'amaloboozi abakwatagana:
5. Apple Home (HomeKit): Ggulawo app ya Home ku iPhone/iPad yo, koona ku kabonero ka Three Dots (waggulu ku ddyo) > Home Settings. Kebera olukalala lwa Abantu era oggyewo eyali munno oba munno mu kisenge. Ssenda wansi ku Cameras & Doorbells ne Allow Speaker & TV Access era ekugira okuyingira ku "Abantu Bokka Abagabana Awaka Gano".
6. Google Home: Ggulawo app ya Google Home, koona ku Settings > Household, londa omuntu yenna atalina lukusa, era koona ku Ggyawo Member. Era kebera Ensengeka > Ekola ne Google okuggyako omukutu gwonna ogw’obwengula ogw’omuntu ow’okusatu (nga IFTTT oba Home Assistant) omukozesa w’ebibi by’ayinza okuba nga yakwataganya.
7. Amazon Alexa: Ggulawo app ya Alexa, genda ku More > Settings > Your Profile & Family, era okebere Amazon Household okuggyawo profile yonna ey'omuntu omukulu eyungiddwa (amazon.com/myh/manage). Lemesa olukusa lwa Drop In mu mizindaalo gyonna egya Echo kale tewali muntu yenna wa bweru asobola kufuula mizindaalo gyo egy'amagezi okuba intercom enzigule nga tokkirizza.

Okubala apps z'emmotoka eziyungiddwa (The overlooked GPS stalker vector)¶

Mmotoka ez’omulembe ezikoleddwa oluvannyuma lwa 2016 zirimu modem z’amasimu ezizimbibwamu ne GPS transceivers ezitegeeza endagiriro y’oluguudo lw’emmotoka entuufu, sipiidi, ebyafaayo by’olugendo, n’ekifo we yasimbye eri app ekwatagana ne ssimu ey’omu ngalo essaawa 24 buli lunaku. Ne bw’oddiza ebisumuluzo by’emmotoka ebirabika okuva ku eyali munno, app y’essimu yaabwe ekyasobola okulondoola w’osimba, okusumulula enzigi z’emmotoka yo okuva wala, oba okufuuwa eŋŋombe n’amataala okuggyako ng’osazizzaamu profile yaabwe eya digital driver.

• Engeri y'okusalako okulondoola mmotoka eziyungiddwa:
• Tuula munda mu mmotoka oggulewo touchscreen ya dashboard eya wakati infotainment. Genda ku Settings > Profiles / Connected Services / Data & Privacy okebere amasimu gonna agayungiddwa ne profile za ddereeva ezikkirizibwa.
• Kuba ku bbaatuuni y’omukozi w’emmotoka eyamba bakasitoma (akabonero akalaga SOS / Info / OnStar / Connected Services okumpi n’endabirwamu y’emabega) oba kuba ku nnamba y’omukozi w’emmotoka enkulu ey’okulabirira bakasitoma ng’olina Enamba yo ey’okumanyisa mmotoka (VIN) n’obukakafu bw’obwannannyini/okwewandiisa (oba kkopi y’ekiragiro ky’okukuuma obutabanguko mu maka). Saba agent okukola amangu Master Account Reset, okusazaamu abakozesa app bonna ab’okubiri abakkirizibwa, era okukyusa obwannannyini bwa telematics obusookerwako bwokka ku ndagiriro yo empya, ey’obwannannyini eya email.
• Emmotoka za Tesla: Ggulawo touchscreen (Controls > Locks) okwekenneenya buli Ekisumuluzo ky’Essimu ekiwandiisiddwa ne kaadi y’ekisumuluzo; sazaamu Ekisumuluzo ky’Essimu kyonna ky’otomanyi mangu ddala, olwo oggulewo app ya Tesla (Security & Drivers > Manage Drivers) okuggyawo baddereeva ab’okubiri n’okukyusa ekigambo ky’okuyingira ekya akawunti yo eya Tesla.

Ekitundu 3: Okuzuula ebikozesebwa mu kulondoola ku ssimu ez’amaanyi, ebikozesebwa mu bufumbo, ne spyware¶

Stalkerware (era esuubulibwa mu by'obusuubuzi nga "spouseware", "employee monitoring software", oba "parental control apps" nga mSpy, FlexiSPY, Cocospy, Hoverwatch, Eyezy, uMobix, oba Spyera) ye software ey'okulondoola mu nkukutu eteekebwa ku ssimu ey'omu ngalo omuntu alina obuyinza obw'omubiri ku kyuma ekitaliiko kkufulu era ng'amanyi passcode ya screen y'omukozesa. Oluvannyuma lw'okuteekebwako, stalkerware eddukira mu kasirise mu mugongo ng'erina akabonero akakwese oba akakwese (akatera okuyitibwa "System Service", "Device Health", "Wi-Fi Settings", oba "Update Manager") era n'eteeka ekifo kyo ekya GPS mu kiseera ekituufu, obubaka bwa SMS, emboozi za WhatsApp/Signal, ebiwandiiko by'amasimu, ebifaananyi, ebyafaayo by'okutambula ku mukutu, n'... ambient microphone recordings ku web dashboard efugibwa oyo akozesa obubi.

Okulondoola Akawunti y'Ekire vs Apps za Stalkerware eziteekeddwamu¶

Nga tonnayigga apps za spyware ez’enjawulo, kitegeere nti ebitundu 80 ku 100 eby’okulondoola essimu za ssimu kyetaagisa zero software installation ku ssimu yo. Singa omuntu amanyi Apple ID (iCloud) password yo oba Google Account password yo, asobola okuyingira icloud.com/find oba google.com/android/find okuva ku web browser yonna, laba ekifo kyo ekituufu ekya GPS mu kiseera ekituufu, soma iMessages zo ezikuumiddwa, WhatsApp backups, ebifaananyi, n’abo b’okwatagana nabo, era clone essimu yo ku iPad oba tablet enkadde ekwese mu drawer yaabwe.

flowchart TD
    A["Essimu Eteeberezebwa Okulondoolebwa Partner oba Stalker"] --> B["Kebera Vector 1 Okusooka: Akawunti y’ekire & Okugabana Ebifo Ebizimbibwamu (80% ku Misango)"]
    B --> C["Ku iPhone: Kozesa Apple 'Safety Check' (Ensengeka > Eby'ekyama & Obukuumi > Okukebera Obukuumi)"]
    B --> D["Ku Android: Kebera Google Find My Device, Google Maps Okugabana Ebifo & Ebyuma Ebiyungiddwa"]
    C --> E["Kebera Vector 2: Entuula z’Obubaka eziyungiddwa ku mukutu (WhatsApp, Signal, Telegram, iMessage ku Mac/iPad)"]
    D --> E
    E --> F["Kebera Vector 3: Sideloaded Android Stalkerware APKs oba iOS MDM Okusengeka Profiles"]
    F --> G{"Osanze Active Stalkerware oba Cloud Sync Etakkirizibwa?"}
    G -- "Yee" --> H["Obujulizi bw’okukuba ku ssimu ng’okozesa kkamera ey’okubiri ey’enjawulo (Tokwata ku ssimu eriko obuwuka)"]
    H --> I["Nga Safe okufuluma: Factory Reset (oba DFU Restore) Essimu era Okole Brand-New Cloud Account"]

Engeri y'okubala ebitabo bya iPhone (iOS) okuzuula oba efunye stalking ne spyware¶

Kubanga enkola ya Apple eya iOS essa mu nkola enkola enkakali ey’okukozesa app sandboxing (App Store code signing), stalkerware ey’obusuubuzi tesobola kuteekebwa ku mabbali ku iPhone eya bulijjo, etali ya jailbreken nga tekulese bubonero bwa nkola bulabika. Wabula, abagoberezi ba iPhone bakozesa enkola nnya entongole z’osobola okubala mu ddakiika 3:

1. Ddukanya ekintu kya Apple ekizimbibwamu "Safety Check" (iOS 16 n'empya):
2. Ggulawo Ensengeka > Eby'ekyama & Obukuumi > Okukebera Obukuumi.
3. Apple yatonda ekintu kino naddala n’ebibiina ebiwagira obutabanguko mu maka. Osobola okulonda Manage Sharing & Access (okuddamu okwetegereza mu kasirise n’okulonda okusazaamu ani asobola okulaba Find My location, Shared Photo Albums, Calendar, HomeKit accessories yo, ne iPhones, iPads, oba Macs endala ki eziyingiziddwa mu Apple ID yo) oba okukwata ku Emergency Reset (esala amangu ddala okugabana ekifo kyonna ne buli muntu, ezzaawo olukusa lw’ekyama lw’enkola, efuluma iCloud ku byuma ebirala byonna, era ekugira iMessage ne FaceTime nnyo ku iPhone eri mu ngalo zo).
4. Kebera oba MDM / Configuration Profiles ne Jailbreaks ezikwese:
5. Spyware ya iPhone ey’ettunzi etakozesa backups za iCloud yeetaaga okussa mu mubiri iPhone yo etaliiko kkufulu mu kompyuta n’okussaamu Mobile Device Management (MDM) Configuration Profile (oba okumenya essimu).
6. Ggulawo Ensengeka > General > VPN & Enzirukanya y'Ekyuma. Ku iPhone eya bulijjo ey’omukozesa ow’obuntu (etaddukanyizibwa mukama wo ow’ekitongole), walina okubaawo zero Configuration Profiles oba MDM profiles eziwandiikiddwa wano. Bw’olaba profile ya Device Management gy’otomanyi oba root certificate, omuntu alina physical access yateeka management profile ku ssimu yo.
7. Kebera App Privacy Report ne Microphone / Camera Ebiraga:
8. Laba enkoona eya waggulu ennyo ku ddyo ku screen ya iPhone yo: iOS eraga orange dot ekikakatako buli app yonna lw’eba ekozesa microphone yo, ne green dot buli app yonna lw’eba ekozesa camera yo. Swipe wansi okuggulawo Control Center nga dot erabika okulaba erinnya ettuufu erya app ng'okozesa sensor.
9. Ggyako Enteekateeka > Eby’ekyama & Obukuumi > Lipoota y’Ebyama ku App okulaba ekiwandiiko ekiwandiikiddwako ekiseera kya buli app eyayingira mu kifo kyo, akazindaalo, kkamera, abantu b’okwatagana nabo, oba ebifaananyi mu nnaku 7 eziyise.
10. Ggyako Lockdown Mode bw'oba oyolekedde nation-state oba high-end commercial mercenary spyware:
11. Bw’oba oli munnamawulire, omulwanirizi w’eddembe ly’obuntu, omukungu, oba ekigendererwa eky’amaanyi nga weeraliikirira ku zero-click mercenary spyware (nga Pegasus oba Predator), genda ku Settings > Privacy & Security > Lockdown Mode ogikole.

Engeri y'okubalirira essimu ya Android okuzuula stalkerware enkweke¶

Kubanga Android ekkiriza abakozesa (oba omuntu akutte essimu yo etaliiko kkufulu okumala eddakiika 3) okukyusakyusa ku "Install unknown apps" ne sideload hidden .apk fayiro za stalkerware butereevu okuva ku web browser, Android yeetaaga okubala olukusa okw’emitendera 5 okusingawo:

1. Kakasa nti Google Play Protect ekya ON:
2. Omuntu akozesa obubi bw’ateeka stalkerware ey’ettunzi (nga mSpy oba FlexiSPY) ku ssimu ya Android, omutendera ogusooka ku kitabo ky’okussaako spyware kibalagira okuggyako Google Play Protect essimu ereme kuvaayo banner eraga nti app ya spyware ey’obulabe yazuulibwa.
3. Ggulawo app ya Google Play Store, koona ku Profile Icon (waggulu ku ddyo) > Play Protect > Settings (gear icon) yo. Singa Scan apps ne Play Protect ekyusiddwa OFF, eyo ye bendera emmyufu enkulu nti omuntu yalemesa mu ngalo scanner y’essimu yo ey’okulwanyisa malware okukweka sideloaded stalkerware. Kiddemu okugikoleeza (nga oli mwetegefu stalkerware okuzuulibwa n’okuzibikira).
4. Okubalirira menu ya "Accessibility Services" (The #1 Android Stalkerware Hook):
5. Stalkerware ya Android ey’omulembe tesobola kusoma bubaka bwo obwa WhatsApp, Signal, oba social media okuggyako ng’oyo agiteeka mu kompyuta awadde spyware app Accessibility Service olukusa (ekintu ekigendereddwamu abazibe b’amaaso oba abakozesa enkola y’enkola y’emirimu ekisobozesa app okusoma buli kigambo ku screen n’okuwandiika buli kisumuluzo).
6. Ggulawo Ensengeka > Okutuuka ku > Apps eziteekeddwa (oba Apps eziwanuliddwa). Kebera buli app emu ewandiikiddwa wano. Bw'olaba app eyitibwa "System Update", "Device Health Service", "Wi-Fi Sync", "Settings Helper", oba app yonna gy'otategese mu bulambulukufu ku bulemu oba omuddukanya password, kumpi kikakafu nti stalkerware.
7. Okubalirira "Device Admin Apps" ne "Okuyingira mu kumanyisa":
8. Ggulawo Ensengeka > Obukuumi & Eby'ekyama > Ensengeka endala ez'obukuumi > Apps z'omuddukanya ekyuma (oba noonya Ensengeka ku "Omuddukanya ekyuma"). Stalkerware yeewandiisa nga Device Administrator okukulemesa okugiggyako okutuusa lw’oggyako akabonero ka admin box yaayo wano.
9. Enteekateeka z'okunoonya ku "Okuyingira mu kumanyisibwa" (oba Okuyingira mu pulogulaamu ey'enjawulo > Okuyingira mu kumanyisibwa). App yonna ekyusiddwa ON wano esobola okukoppa mu kasirise buli SMS, Signal, ne WhatsApp notification eyingidde.
10. Noonya olukalala lwa All Apps mu bujjuvu okuzuula ebifaananyi ebitaliiko kintu kyonna oba ebikwese:
11. Genda ku Ensengeka > Apps > Laba apps zonna [X]. Koona ku bubonero busatu waggulu ku ddyo olonde Laga enkola. Ssenda mpola mu lukalala ng’onoonya apps ezirina akabonero enjeru oba akatangaavu akataliiko kintu kyonna, amannya agawulikika ng’enkola eya bulijjo agakozesa bbaatule ennyingi oba data y’essimu mu mugongo, oba apps eziteekeddwa ng’oyita mu web browser okusinga Google Play Store (koona ku app n’ogenda wansi ennyo wansi wa App details in store: enkola entuufu oba Play Store apps egamba nti "App installed from Google Play Store", so nga sideloaded stalkerware egamba nti "Eteekeddwa okuva ku Chrome" oba "Package Installer").
12. Okubalirira Google Maps Okugabana Ebifo n'Ebyuma Ebiyungiddwa ku Bubaka:
13. Ggulawo app ya Google Maps, koona ku Profile Icon > Location sharing yo, era okakasizza nti ekifo kyo ekiramu tekigabanyizibwa na email ya email y’omutulugunya oba ng’oyita ku web link ey’enkalakkalira.
14. Ggulawo WhatsApp (Settings > Linked Devices), Akabonero (Settings > Linked Devices), Essimu (Settings > Devices), ne Obubaka bwa Google (Device pairing). Singa omulumbaganyi asika QR code ku ssimu yo etaliiko kkufulu okumala sekondi 5 ng’oli mu shower, balina live mirror ya buli mboozi encrypted ku laptop browser yaabwe.

Ekitundu 4: Okukuuma Wi-Fi router yo ey’awaka n’okuzimba digital baseline ennyonjo¶

Bw’omala okubeera obukuumi mu mubiri era nga weetegese okusalako ddala omuntu ayingirira oba amutulugunya, ggalawo omukutu gwo n’ebyuma byo eby’awaka mu nsengeka eno yennyini:

1. Nyiga pinhole ya hardware Factory Reset ku Wi-Fi router yo: Singa eyali munno, gw’osula naye, oba hacker yali amanyidde ddala password ya admin ya router yo, yalina app y’omutunzi wa router ku ssimu (nga Eero, Netgear Nighthawk, TP-Link Deco, Google Nest Wifi, oba Asus Router) ng’eteekeddwa ku ssimu ye, oba ng’ategeka remote management / DDNS yo, ng’akyusa Wi-Fi password yokka tekimala. Kwata physical reset pinhole emabega wa router okumala sekondi 15, teeka router wansi wa brand-new cloud account, kola Router Admin Password empya, teekawo erinnya eppya erya Wi-Fi network name (SSID) ne WPA2/WPA3 passphrase, era lemesa UPnP (Universal Plug and Play) ne Remote Web Management.
2. Tambuza kamera zonna entegefu, ebizibiti, ne ttivvi ku mutimbagano gwa "Guest Wi-Fi" ogwetongodde: Ggulako Guest Wi-Fi Network eya router yo (nga "Client Isolation" ekoleddwa) era oyunge kamera zonna entegefu, baby monitors, smart plugs, robot vacuums, ne smart TVs ku mutimbagano gwa Guest, ate nga okuuma laptops zo ez'obuntu ne smartphones ku network enkulu. Mu ngeri eyo, ekintu ekigezi ekitali kituufu tekiyinza kusika oba okuwuliriza kompyuta zo ez’obuntu.
3. Kola Factory Reset (oba Replacement) ennyonjo ya smartphone eriko akawuka:
4. Olw’okuba deep stalkerware esobola okukweka fayiro ezinywevu oba configuration profiles eziwona basic app uninstallation, engeri yokka eyesigika ebitundu 100 ku 100 ey’okuyonja essimu eyalina stalkerware eyateekebwamu ye full Factory Reset (Settings > System > Reset options > Erase all data (factory reset) ku Android, oba Settings > General > Transfer or Reset iPhone > Erase All Content and Settings, oba kompyuta DFU Mode Restore, ku iPhone).
5. EKIKULU: Bw'oba oteeka essimu okudda waggulu oluvannyuma lw'okuddamu okugiteeka mu kkolero, TOLONDA "Restore from iCloud / Google Cloud Backup", kubanga okuzzaawo ekifaananyi ky'ekyuma ekijjuvu kiyinza okuddamu okuwanula app ya stalkerware enkweke oba ensengeka ezikoseddwa amangu ddala ku ssimu ennyonjo. Mu kifo ky'ekyo, londa "Teeka ng'ekyuma ekipya", yingira n'akawunti y'ekire empya ddala oba eriko obukuumi obujjuvu, era mu ngalo wanula apps zokka ezimanyiddwa ennyo z'omanyi okuva ku App Store oba Play Store entongole.

Ebibuuzo ebitera okubuuzibwa¶

Ensonda zeekebeddwa¶

• Ekitongole ky’obukuumi ku mikutu gya yintaneeti n’ebizimbe (CISA) ne Federal Bureau of Investigation (FBI, Amerika): Okukuuma ebyuma bya Smart Home Internet of Things (IoT), okukendeeza ku kuwamba kwa kamera, n’okulungamya abakozesa ku Stalkerware.
• Omukutu gw’eggwanga okumalawo obutabanguko mu maka (NNEDV Safety Net Project, Amerika): Ekitabo ky’obukuumi bwa tekinologiya n’eby’ekyama eri abawonawo: Okukebera Spyware, Smart Home Abuse, n’obukuumi bw’emmotoka eziyungiddwa.
• National Cyber ​​Security Center (NCSC, United Kingdom): Kkamera z’obukuumi ezigezi: Okuzikozesa mu ngeri ey’obukuumi mu maka go, n’okulungamya abawona okutulugunyizibwa mu maka ku by’okwerinda by’ebyuma.
• Omukago ogulwanyisa Stalkerware (Ekibiina ekikola ku by’ensi yonna / Electronic Frontier Foundation, Kaspersky, Malwarebytes, Avast, NNEDV, WEISSER RING): Ebiraga Stalkerware, Enkola z’okuzuula obukuumi, n’enkola ezitali za kugaziya.
• Obukuumi bwa Apple Platform (Amerika): Ekitabo ky’Omukozesa w’Obukuumi bw’Omuntu ku Byuma bya Apple: Okukozesa Okukebera Obukuumi mu iOS, Okubala Ebifaananyi by’Okusengeka, n’Engeri y’Okuggalawo.
• eSafety Commissioner (Gavumenti ya Australia, Australia): Okukozesa obubi mu tekinologiya: Okubala ebyuma by’awaka ebigezi, Akawunti z’ebire, ne Spyware z’oku ssimu mu ngeri ey’obukuumi.

Ebiragiro ebikwatagana nabyo¶

• Okukuuma routers z’awaka n’ebyuma bya IoT
• GPS tracker ne AirTag okulondoola
• Obutabanguko mu maka
• Okwekuuma okulondoola n’okulondoola omubiri