Xañ kamera kër gu xarañ, pirateri monitëru xale ba noppi stalkerware telefon¶
Gis ni gann wax jaaraleko ci sa doom Wi-Fi baby monitër, xool sa saal jaaraleko ci benn kamera kaaraange ci biir, welo sa buntu smart locks ak termostat fu sori, wala topp bépp mesaas ak GPS dem ci sa smartphone jaaraleko ci stalkerware priva emergency ak priva safe. Smart kër ak mobile surveillance incidents daanu ci ñaari kategori yu wuute yuy laaj tontu yu wuute lool: song yu sori yu pirat yu biti di jëfandikoo baatu-jàll yu sacc ("remplissement credentiel"), ak xarala yu bees yu yomb yu juge ci ab naataango bu nekk wala bu njëkk, sa roommate, wala landlo.
Sudee gann bu nekk ci biti dafa jàpp benn kamera bu xarañ wala monitëru xale ba, dagg kuuraŋ bi ci aparey bi ba noppi wëlbati sa cloud ak sa kàrne Wi-Fi dafay taxawal dugg gi ci saasi. Waaye, soo jàppee ni ab jàppantekat bu fiir, jàppantekat bu njëkk, wala ab ñaawtéef ci sa kër moo samp stalkerware ("spouseware") ci sa telefon wala nga tëye administratër bu nëbbu bi ci sa loke kër, kamera, wala oto bu lëkkaloo, fomp losisel bi ci saasi wala soppi baatu-jàll yi ñu bokk mën na tax ci saasi artu ab ñaawtéef bu am loraange. Waajalug kaaraange ci aparey buñu dul saytu dafa wara njëkk saa yu nekk.
Defal lii leegi¶
- Debrancher ci saasi kamera yiñ jàpp ci biir kër gi ak monitëru xale ba ci prise bi: Bul yéem ci fay kameraa bi ci biir aplikaasioŋu smartphone. Dindil fiil biy boole kuuraŋ bi ci prise bi nga dindi bépp batëri bu ci des suko defee lenti bi, mikro bi ak oparlër bi dee lëmm.
- Denc firnde forensiik yu gàtt balaa ngay reset sudee mën nga ko def: Jëfandikool benn telefon bu wuute, jëlal ab nataal wala wideo bu gaaw ci kamera biy melax, app bi Aparey yuñ boole / Jaar-jaaru Dugg ekraŋ, wala kontu administratër yi nga xamul, nga bind simili bi sa baat wala lout defarkat bi mën nañu ko méngale.
- Xaaral ndax ki dugg ci kër gi gan la wala nit ku nga xamante (Àrtu ci yokkute): Sudee ab jàppantekat bu njëkk, jabar/jekker, ki nga nekkal, wala boroom kër gi musa dëkk ci kër gi, xam sa baatu-jàll Wi-Fi, wala tëye sa telefon buñu tëjuwul, jàpp ni dina ñu jot ab yëgle push ci saasi ci saa yi nga dindi wala dindi seen Liir wàllu kaaraange kër gi ci suuf balaa ngay efaase dara.
- Debrancher sa routeur Wi-Fi kër sudee dañuy jaay serrure yu xarañ yi, buntu garage yi, wala thermostat yi: Debrancher fiil kuuraŋ bi ci sa routeur Wi-Fi ak sa modem ngir dagg bépp chaine de commande cloud bu sori ci saasi, ba noppi nga jëfandikoo sa deadbolt ak buntu garage bi ak sa loxo, nga jëfandikoo facteur bi nga dindi physique bi.
- Jëfandikool aparey bu set te kenn duko saytu ngir soppi baatu-jàll bi nga wut ndimbal: Bul musa gëstu dindi stalkerware, mbaaru fitna ci biir kër, wala komànd yu yoon santaane ci telefon wala ordinatër portable boo jàpp ni dañu koy saytu. Jëfandikool ordinatëru bibliotek, telefonu xarit bu wóolu, ordinatëru biro, wala telefonu burner bu yomb te nga jënd xaalis ba noppi denc ko ci done seliluwaar fu sori ci sa Wi-Fi kër.
- Aktiwiseel gëm-gëmu Facteur yu bari (MFA) te nga bës "Dellu ci bépp aparey" ci sa kontu imeel bu njëkk ak kontu cloud kër gu xarañ: Soo jogee ci aparey bu sell, njëkkal soppi baatu-jàll bi ci sa kontu imeel bu njëkk, ba noppi nga soppi baatu-jàll bi ci sa kontu Ring, Nest, Google, Alexa, Apple Home, E gëm-gëm bu am ñaari anam, nga dindi bépp sesioŋ buy dox ak jëfandikukat yiñ bokk ci kër gi.
flowchart TD
A["Dañu ni dafa jàpp kamera, jaay kër gu xarañ, wala stalkerware telefon"] --> B{"Kan mooy kiñ jiiñ ni moo dugg ci kër gi?"}
B -- "gann bu biti / pirat buy wut xéewal" --> C["Debrancher ci saasi kamera yi ak monitëru xale ba ci kuuraŋ bi ci biir kër gi"]
C --> D["Duggal ci Smart Home App ci aparey bu sell bi & jaar-jaaru dugg ci ekraŋ bi"]
D --> E["Baatu-jàll bu njëkk ci imeel + Baatu-jàll Smart Home Cloud & Fexe MFA"]
E --> F["Reset usine aparey IoT yiñ laal, yeesal losisel bimu àndaale ak toxu ci gan/IoT Wi-Fi VLAN"]
B -- "Partner bi fi nekk wala bu njëkk, ki nekkal, wala stalker" --> G["STOP: Bul efaase Stalkerware wala dindi jëfandikoo gi (Risku Eskalaasioŋ Alert)"]
G --> H["Jëfandikool aparey buñu dul saytu (Telefonu xarit, PC Bibliothèque, wala Telefoŋ buñ njëkka fay) ngir jokkool ak Avocat yu Kaaraange"]
H --> I["Saytu sañ-sañu iOS/Android, senkronisaasioŋu kontu iCloud/Google, ak aplikaasioŋu oto yiñ boole"]
I --> J{"Waajal nga genn ci jàmm wala am poliis / sàrtu tere aar?"}
J -- "Waaw" --> K["Reset router usine, dindi jëfandikoo kër/oto buñ bokk, ak wecci wala DFU-Wipe telefon"]
J -- "Déedet" --> L["Fexeel Decoy def liggéey bu jaadu ci telefon buñuy saytu bi ngay jëfandikoo telefon bu sell bu sekkere ngir genn ci palaŋu genn"]
Wàll 1: Kamera kaaraange ci biir kër ak jàpp monitëru xale bu Wi-Fi¶
Su amee baat bu gann buy wax ci saasi ci monitëru xale bu ndaw wala benn kameraa pan-tilt bu nekk ci biir néeg bi tàmbali wëréelu boppam ngir topp la ci biir néeg bi, jaar-jaar bi dafay yàq lool. Waaye, lu ëpp 95 pursaa ci mbirum konsomatër yiñ yëgle, ki la song "piratewul" ondes radio yiñ encrypté ci biti sa kër; lu moy loolu, dañu dugg ci portaalu web sa kamera ci jëfandikoo baatu-jàll buñ sacc ci benn sitweb bu amul benn lëkkaloo ak done.
Naka la songekat yi di jàpp ay kamera yu xarañ ak ay monitëru xale baayima¶
Xam yoonu xarala bi gëna jub moo lay wax ban seytu kaaraange moo lajj:
- **Stuffing Credential ci Kontu Camera Cloud (Li gëna bari) **: Soo jëfandikoo benn adres email ak baatu-jàll ci aplikaasioŋu kamera yu xarañ (lu melni Ring, Nest, Wyze, Arlo, Blink, wala Eufy) bi nga njëkka jëfandikoo ci benn sitweb buy jaay ci detaay, jeu video, wala forum, baatu-jàll buy saytu ay milioŋ ci krim yi serveur yiy dugg ci kamera. Bu benn bot amee hit, dañuy jaay ay firnde ci forum kriminel yi, foofu la voyeur yi ak troll yi di duggu ci sa stream kamera ci saasi ba noppi ñu bës butoŋu mikro bi tuddu "Two-Way Talk".
- Exposed UPnP Port Forwarding ak Baatu-jàll yiñ jagleel ci Kamera IP yi: Kamera reso yu yàgg wala generik (kamera IP RTSP/ONVIF ak monitër yu nuroo ak Foscam) dañuy faral di yónnee ak tur jëfandikukat ak baatu-jàll buñ jagleel (lu melni
admin / adminwalaadmin / 12345) nga jëfandikoo Plug and Play (UPnP) ngir ubbi ci saasi benn port buy dugg ci sa routeur kër (Port 80,Port 554, walaPort 8000). Motëri seetlu yi ci aparey yiy boole internet (lu melni Shodan wala Censys) dañuy index port yu ubbeeku yi ci saasi, suko defee képp ku nekk ci internet mëna xool feed biñ xamul. - Séddoo "Ndawu njaboot" wala "Guest" Lëkkalekaay: Partenaire yu njëkk, babysitters, dog walkers, wala luwekat yu njëkk yi ñu invite benn yoon ñu nekk "Jëfandikukat buñ Séddoo" ci biir sa aplikaasioŋu kër gu xarañ gi, dañuy tëye kamera biy dundu ba noppi tëj jëfandikoo gi ba fàww fileek soppiwul sa baatu-jàll.
- Jëfandikoo RF / FHSS ci monitër yu amul Wi-Fi: Monitëru xale yu amul Wi-Fi yiy jëfandikoo siñaal radio analog yu yàgg 900 MHz / 2.4 GHz mën nañu yenn saa mu jël waxtaan bu jàkkarloo ci telefonu dëkkandoo bu amul kable wala monitëru xale bu nekk ci diggante 100 ba 300t ba 950 me). Monitër yu bees yi DECT 6.0 wala FHSS (Spectrum bu tasaaroo ci fréquence) monitër yu amul Wi-Fi dañuy encrypter ak hop fréquence téemeeri yoon ci seconde te mënu ñu ci dugg ci internet bi.
Limu saytu ci saasi ngir tëye kamera yiñ jàpp ak hub kër yu xarañ yi¶
- Jéego 1: Dindi fiil biy boole kuuraŋ bi: Debrancher USB-C bi wala adaptatëru kuuraŋ baril bi ci ginaaw bépp kamera bu nekk ci biir kër gi ak monitëru xale ba. Sudee kameraa bi amna batëri litium ci biir, tëyeel butoŋu tàkk physique bi 15 seconde ba keroog muy fay, wala nga dugal kameraa bi kanam ci suuf ci biir tiruwaar bu tëju wala armoire buñ laxas ci sarbet bu dëll suko defee lens bi ak mikro bi yépp ñu tëju bi ngay kaaraange sa kontu.
- Jéego 2: Xoolal limu aparey yiñ may ak jëfandikukat yiñ bokk: Balaa ngay efaase aparey bi ci sa kontu, ubbil aplikaasioŋu kamera bi Jekkal kontu> Kaaraange> Jumtukaayi kiliyaan yiñ may wala Liggéeyu dugg ci misaal nga jël benn screenshot buy wane bépp adres buñu xamul, c, wala IP xama guñu ko
"iPhone 15 in Frankfurt"wala"Web Browser in Moscow"). Bi ci topp, ubbil Jëfandikukat yiñ bokk / Ndawi kër yi nga dindi bépp nit boo wóoluwul bu baax. - ** Jéego 3: Soppi sa baatu-jàll imeel bu njëkk, ba noppi sa baatu-jàll niir kamera **: Ndax songekat bi am xëcc ci sa boyet imeel mën na jël "Reset Baatu-jàll" imeel, kaaraange sa kontu imeel bu njëkk ak baatu-jàll 20-araf ak ñaari-facteur authentification, ba noppi soppi sa baatu-jàll benn camera.
- ** 4e jéego: Forse Njàngat bu Ñaari Facteur (2FA) **: Aktiwiseel 2FA ci biir sa aplikaasioŋu kamera jëfandikoo aplikaasioŋu Njàngat (lu melni Google Authenticator, Ente Auth, wala 1Password) moo gën mesaas SMS yu ñuy jàppale. Taalal 2FA ak reset sa baatu-jàll dafay forse serwëru cloud bi mu dindi bépp jeton streaming buy dox ci ay simili.
- Jéego 5: Bësal hardware physique Factory Reset pinhole ci kaw kamera bi: Brancher kamera bi nga tëye hardware bi Reset butoŋu 10 ba 15 seconde ba lampa indicateur bi di melax ba noppi baat biy wax firndeel reset usine. Delloosi kameraa bi ak sa kontu, samp lépp luy xaar Yeesal losisel bimu àndal, ba noppi nga dindi Enregistrement Audio / Microphone ci ñaari anam ci biir jekkal yi ngir bépp kamera bu nekk ci biir kër fu waxtaan baat soxlawul.
| Xeetu monitëru xale / kamera | Ndax mën nañu ko pirate ci net bi? | Danga mëna ñàkk siñaalu deret ci dëkkandoo yi? | Jëf ci wàllu kaaraange ak nëbbëtu |
|---|---|---|---|
| Kamera Wi-Fi / Monitëru aplikaasioŋ (Bague, Nest, Nanit, Owlet, Wyze, Eufy) | Waaw (Jaaraleko ci ay leeral, baatu-jàll yu néew doole, wala ay jafe-jafe ci cloud) | Déedet (Jëfandikoo Wi-Fi WPA2/WPA3 + enkripsioŋ TLS) | Dafay laaj baatu-jàll bu am 20 araf, 2FA buñu wara am, nga tëju ci reso Wi-Fi Guest/IoT, nga jëfandikoo ay persiane physique ci biir kër gi. |
| Kamera IP bu dëkk bi (ONVIF / RTSP) | Waaw (Risk bu rëy) sudee UPnP wala Port Forwarding aktif ci sa routeur | Déedet | Desactivé UPnP ak portu yebal ci sa routeur; tere adres MAC kamera bi yegg ci internet bi gëna yaatu ci jekkal pare-feu routeur bi. |
| Monitëru FHSS / DECT bu amul Wi-Fi (parent portable bu am boucle tëju) | Déedet (amul) (amul chip Wi-Fi te musul laal internet) | Dafa wàcci lool (Fréquence encrypté buy tëb ci diggante 300 meetar / 985 pied) | Standard wurus ngir pepiñeer yi: Pirat yi mënu ñu ci dugg; denc aparey recepteur bi ci biir sa kër. |
| Monitëru xale bu radio analog bu yàgg (49 MHz / 900 MHz yu yàgg yi) | Déedet | Waaw (mën nañu dégg ondes radio yuñ encrypté ci scanner yi wala ci monitër yi ci wetam) | Delloosi ko te wecci ko ci saasi ak monitër FHSS/DECT bu amul Wi-Fi. |
2ème partie: Loke yu xarañ yi, termostat yi, oparlër yi, ak oto yuy boole ci xëccoo yi ci biir kër¶
Ci tëjug boroom kër yi ak luwekat yi, xaajaloo yu jaxasoo yi, ak jafe-jafe yi ci biir kër yi, ecosystemu kër yu xarañ yi (Amazon Alexa, Google Home, Apple HomeKit, Samsung SmartThings) ak aplikaasioŋu telefon yu xarañ yi (Tesla, FordPass, MyChevrolet, Toyota, Hyundai Bluelink, Subarudes Starlink sonal, ñàkka nelaw, ak topp GPS ci saasi.
Kaaraange loke yu xarañ yi, buntu garage yi ak termostat yi¶
Sudee sa làmp dafay melax ci 3:00 waxtu ci suba, sa termostat dafay jekki rek yéeg ba 32 degre Celsius (90 degre Fahrenheit) wala mu wàcci ba 10 degre Celsius (50 degre Fahrenheit), wala sa boulet bu xarañ bi dafay tijji boppam:
- Dindil pack batëri bi ci biir sa boulet bu am xel: Bépp boulet bu am xel (Schlage, Yale, August, Kwikset, Aqara, Niveau) dafay doxal ci 4 ba 8 batëri AA wala pack litium buñ mëna sarse bu nekk ci suufu ** biir ** muur baraam-wër ci biir sa kër. Dindil muur bi ci biir nga dindi batëri bi. Sudee batëri bi amul doole, puce radio bi nekkul ci net bi 100 pursaa, te benn aplikaasioŋ, kodu PIN, wala komand Wi-Fi mënu ko tijji, fekk sa caabi wen physique ak baraam biy wëlbati loxo ci biir dañuy wéy di dox nimu waree.
- Dindil fiil biy génne loxo ci sa buntu garage bu xarañ: Sudee nit ku amul ndigal mën na dugg ci sa MyQ, Genie Aladdin, wala Meross garage controller, dindil pont bu xarañ bi ci prise bi wala nga dindi fiil biy génne jamp bu xonk biy wéer ci buntu garage bi ci biir garage bi.
- Dindil termostat bu xarañ bi ci kuuraŋ bi: Termostat yu xarañ yi (Google Nest, Ecobee, Honeywell Home) dañuy fikse ci kaw kuur bi. Jàppal termostat bi bu baax nga dindi ko ci kaw pin yi ngir dakkal jëfandikoo tàngoor wi ci fu sori ba nga mëna reset usine bi ci suufu Jekkal> Reset> Lëkkaloo kontu / Jekkal yépp nga boole ko ci kontu imeel bu bees.
- Xool Smart Home Hub "Ndaayu kër yi" ak jàppalekatu baat yiñ lëkkale:
- Këru Apple (KëruKit): Ubbi aplikaasioŋu Këru ci sa iPhone/iPad, bësal Ikonu Ñatti Tombi (ci kaw ci ndeyjoor)> Jekkal kër. Saytu limu Nit ñi nga dindi bépp àndado wala àndadoo bu njëkk. Wàccil ba ci Kamera yi & Doorbells ak Nangu Oparlër yi & Tele yi dugg nga tënk dugg gi ci "Nit ñi kese ñoo bokk kër gii".
- Google Home: Ubbi aplikaasioŋu Google Home, bësal Jekkal > Njaboot, tannal bépp nit buñu mayul sañ-sañ, ba noppi bësal Dindi Ndaw. Saytu itam Jekkal > Liggéey ak Google ngir dindi bépp platform otomatisation bu nekk ci digante yenen (lu melni IFTTT wala Home Assistant) bu ab abuser mëna lëkkale.
- Amazon Alexa: Ubbi aplikaasioŋu Alexa, nga dem ci Leneen> Jekkal> Sa Profil & Sa njaboot, nga xool Këru Amazon ngir dindi bépp profil mag bu lëkkaloo (
amazon.com/myh/manage). Def Drop In sañ-sañ yi ci bépp kàddukat Echo suko defee kenn ci biti mënu soppi sa kàddukat bu xarañ bi nekk interphone bu ubbeeku te nanguwoo.
Xool aplikaasioŋu oto yuñ boole (vecteur stalker GPS biñ xàddi)¶
Oto yu bees yiñ defaree ginaaw 2016 dañuy àndaale ak ay modem seliluwaar ak ay transceiver GPS yuy joxe adres mbedd bu oto bi, gaawaayam, jaar-jaaru tukki yi, ak barab bimu gaare ci aplikaasioŋ bu ànd ak telefon bi 24 waxtu ci bis bi. Doonte danga jëlaat caabi oto physique ci sa xarit bu njëkk, seen app telefon mën na topp fi nga gaare, tijji buntu sa oto ci fu sori, wala flash klaxon ak làmp fileek dindiwoo seen profil dawalkat digital.
- Ni ñuy doggee stalking oto bu lëkkaloo:
- Toogal ci biir oto bi nga ubbi tablo infotainment bi ci digg bi. Demal ci Jekkal> Profil yi / Serwiisu lëkkaloo / Done & Sutura nga xool bépp telefon buñ boole ak profil dawalkat yiñ may.
- Woowal butoŋu ndimbalu kiliyaan bi defarkatu oto bi (butoŋu SOS / Info / OnStar / Connected Services bi nekk ci wetu seetu retroviseur bi) wala nga woo nimero kiliyaan bi gëna mag ci defarkatu oto bi nga boole ci sa Nimero ràññeekaay oto bi (VIN) ak firndeg boroom oto bi/komandu aar ci fitna ci biir kër (wala benn kopi). Laajteel ndawu liggéey bi mu def ci saasi Reset Kontu Master, efaase bépp jëfandikukat app buñ may ndigal, ba noppi toxal boroom telematik bu njëkk bi ci sa adres email bu bees, bu privé.
- Dawal Tesla: Ubbi ekraŋ biy laal (
Controls > Locks) ngir saytu bepp Caabi Telefoŋ ak kàrt caabi buñ bind; efaase bépp caabi telefon boo xamul ci saasi, ba noppi ubbi aplikaasioŋu Tesla (Security & Drivers > Manage Drivers) ngir dindi ñaareelu dawalkat yi ak soppi sa baatu-jàll kontu Tesla.
3ème partie: Gis logisiel stalkerware, losisel jabar ak espion¶
Stalkerware (ñu ngi koy jaay itam ni "spouseware", "losisel biy saytu liggéeykat yi", wala "aplikaasioŋ yiy saytu waajur yi" lu melni mSpy, FlexiSPY, Cocospy, Hoverwatch, Eyezy, uMobix, wala Spyera) logiciel buy saytu bu nëbbu la buñ samp ci telefon bu xarañ bi kodu jàll jëfandikukat bi. Buñu ko samp, stalkerware bi dafay dox ci ginaaw ci ab tekkaaral ak benn icon bu nëbbu wala buñ degise (ñu koy faral di woowe "Serwiisu Sistem", "Sérgi-yaram", "Jekkal Wi-Fi", wala "Yeesal Manager") ba noppi yebbi sa barabu GPS ci saasi, bataaxal SMS, mesaas jaar-jaaru nawigasioŋ web, ak enregistremaa yu mikro yi ci tablo web bi ki koy sàkku yor.
AARTU BU AM SOLO CI KAARAANGE: Dindi stalkerware dafay yëgal ci saasi ki lay saytu
Sudee ab naataango buy fitnaal dafa samp stalkerware ci sa telefon wala dugg ci sa kontu iCloud / Google, ** fomp telefon bi, efaase app spyware bi, fay Serwiisu Barab, wala soppi sa baatu-jàll dina taxawal ci saasi feed done yi ci tablo bi fitnaal bi, di leen artu ni gis nga seen fitna ** seen doxalin. surveillance bokk na ci risk yi gëna rëy ci fitnaal bu metti.
- Laata ngay soppi dara ci telefon buñuy saytu, bàyyil telefon bi ñuy saytu ci kër ga (wala nga wéyal sa liggéey bu amul benn werante) nga jëfandikoo aparey bu wóor te kenn duko saytu (telefonu xarit, ordinatëru bibliotek publik, ordinatëru barabu liggéey, wala xaalis bu yomb jënd ngir prepaid telefon)
- In the United States, call the National Domestic Violence Hotline at 1-800-799-SAFE (7233) wala mbind "START" to 88788. In the United Kingdom, call the National Domestic Abuse Helpline at 0808 2000 247. In Canada, check sheltersafe.ca. In Australia, call 1800RESPECT (1800 737 732). Gis nimero paj mu jamp ngir am ndimbal ci àdduna bi yépp.
Kontu Cloud buy topp ak aplikaasioŋu Stalkerware buñ samp¶
Laata ngay rëbb app exotic spyware, xam ni 80 pursaa ci stalking smartphone soxlawul instalaasioŋ losisel ci sa telefon. Ku xam sa baatu-jàll Apple ID (iCloud) wala baatu-jàll Kontu Google, mën na dugg ci icloud.com/find wala google.com/android/find from any web browser, see your exact real-time GPS location, read your backed-up iMessages, WhatsApp backups, photos, and contacts, and clone your phone onto an old iPad or tablet hidden in their drawer.
flowchart TD
A["Suspect Phone Is Being Monitored by Partner or Stalker"] --> B["Check Vector 1 First: Cloud Account & Built-In Location Sharing (80% of Cases)"]
B --> C["On iPhone: Run Apple 'Safety Check' (Settings > Privacy & Security > Safety Check)"]
B --> D["On Android: Check Google Find My Device, Google Maps Location Sharing & Linked Devices"]
C --> E["Check Vector 2: Linked Messaging Web Sessions (WhatsApp, Signal, Telegram, iMessage on Mac/iPad)"]
D --> E
E --> F["Check Vector 3: Sideloaded Android Stalkerware APKs or iOS MDM Configuration Profiles"]
F --> G{"Did You Find Active Stalkerware or Unauthorized Cloud Sync?"}
G -- "Waaw" --> H["Screenshot Evidence Using a SECOND Separate Camera (Do Not Screenshot on the Infected Phone)"]
H --> I["When Safe to Exit: Factory Reset (or DFU Restore) Phone and Create Brand-New Cloud Account"]
How to audit an iPhone (iOS) for stalking and spyware¶
Because Apple's iOS operating system enforces strict hardware-verified app sandboxing (App Store code signing), commercial stalkerware cannot be sideloaded onto a normal, non-jailbroken iPhone without leaving visible system markers. Instead, iPhone stalkers use four specific mechanisms that you can audit in 3 minutes:
- Run Apple's built-in "Safety Check" tool (iOS 16 and newer):
- Open Settings > Privacy & Security > Safety Check.
- Apple created this feature specifically with domestic violence advocacy groups. You can choose Manage Sharing & Access (to quietly review and selectively revoke who can see your Find My location, Shared Photo Albums, Calendar, HomeKit accessories, and which other iPhones, iPads, or Macs are signed into your Apple ID) or tap Emergency Reset (which immediately severs all location sharing with everyone, resets system privacy permissions, signs out of iCloud on all other devices, and restricts iMessage and FaceTime strictly to the iPhone in your hand).
- Check for hidden MDM / Configuration Profiles and Jailbreaks:
- Commercial iPhone spyware that does not use iCloud backups requires physically plugging your unlocked iPhone into a computer and installing a Mobile Device Management (MDM) Configuration Profile (or jailbreaking the phone).
- Open Settings > General > VPN & Device Management. For a normal personal consumer iPhone (that is not managed by your corporate employer), there should be zero Configuration Profiles or MDM profiles listed here. If you see an unfamiliar Device Management profile or root certificate, someone with physical access installed a management profile on your phone.
- Check App Privacy Report and Microphone / Camera Indicators:
- Watch the very top right corner of your iPhone screen: iOS displays a mandatory orange dot whenever any app is actively using your microphone, and a green dot whenever any app is using your camera. Swipe down to open Control Center while the dot is visible to see the exact name of the app using the sensor.
- Turn on Settings > Privacy & Security > App Privacy Report to see a timestamped log of every app that accessed your location, microphone, camera, contacts, or photos over the last 7 days.
- Turn on Lockdown Mode if you face nation-state or high-end commercial mercenary spyware:
- If you are a journalist, human rights defender, executive, or high-profile target worried about zero-click mercenary spyware (such as Pegasus or Predator), go to Settings > Privacy & Security > Lockdown Mode and turn it on.
How to audit an Android phone for hidden stalkerware¶
Because Android allows users (or someone holding your unlocked phone for 3 minutes) to toggle on "Install unknown apps" and sideload hidden .apk stalkerware files directly from a web browser, Android requires a deeper 5-step permission audit:
- Verify that Google Play Protect is still turned ON:
- When an abuser installs commercial stalkerware (like mSpy or FlexiSPY) on an Android phone, step one of the spyware's installation manual instructs them to turn off Google Play Protect so the phone will not pop up a warning banner saying a harmful spyware app was detected.
- Open the Google Play Store app, tap your Profile Icon (top right) > Play Protect > Settings (gear icon). If Scan apps with Play Protect is toggled OFF, that is a major red flag that someone manually disabled your phone's anti-malware scanner to hide sideloaded stalkerware. Turn it back on (only when you are ready for the stalkerware to be detected and blocked).
- Audit the "Accessibility Services" menu (The #1 Android Stalkerware Hook):
- Modern Android stalkerware cannot read your WhatsApp, Signal, or social media messages unless the installer grants the spyware app Accessibility Service permissions (a feature meant for blind or motor-impaired users that allows an app to read every word on the screen and log every keystroke).
- Open Settings > Accessibility > Installed apps (or Downloaded apps). Inspect every single app listed here. If you see an app named "System Update", "Device Health Service", "Wi-Fi Sync", "Settings Helper", or any app you did not explicitly configure for a disability or password manager, it is almost certainly stalkerware.
- Xool "Aplikaasioŋu Admin aparey" ak "Dëgëral yëgle":
- Ubbi Jekkal > Kaaraange & Sutura > Yeneen jekkal kaaraange > Aplikaasioŋu admin aparey (wala seetee Jekkal ngir "Admin aparey"). Stalkerware dafay bind boppam ni Administratëru aparey ngir tere la dindi ko ba nga dindi boîte admin bi fii.
- Seetal ci Jekkal yi "Dëgëral yëgle" (wala Dëgëral aplikaasioŋ bu amul fenn > Duggal yëgle). Bépp app buñu taal fii mën na kopie bépp SMS buy dugg, siñaal, ak yëgle WhatsApp.
- Seetal limu Aplikaasioŋ yépp ngir gis ikoon yu amul dara wala yuñ degise:
- Demal ci Jekkal > Aplikaasioŋ > Xoolal [X] aplikaasioŋ yépp. Bësal ñetti tombi ñaw yi ci kaw ci ndeyjoor nga tann Wone sistem. Demal ndànk ci biir limu app yi nga seet app yi am icon bu weex bu amul dara wala bu leer, tur yiy nuru sistem yu bari yuy lekk batëri bu bari wala done mobile ci ginaaw, wala app yiñ samp ci nawigatër web bi moo gën Google Play Store (bësal app bi te scroll ba ci suufu ** app real ci suufu ** app store wala store: "App bi dañu ko samp ci Google Play Store", waaye stalkerware biñ sarse ci wet gi dafay wax "Chrome lañu ko samp" wala "Sampkatu kofre").
- Xool Google Maps di séddoo barab ak jumtukaayi mesaas yuñ lëkkale:
- Ubbi aplikaasioŋu Google Maps, bësal sa Ikonu Profil > Séddoo barab, nga xool ndax sa barab bi nga nekk duñu ko séddoo ak adres email ki lay sàkku wala jaaraleko ci lëkkalekaay web bu nara yàgg.
- Ubbi Watsap (
Settings > Linked Devices), Siñaal (Settings > Linked Devices), Telegram (Settings > Devices), ak Mesaasu Google (Device pairing). Sudee ab songekat scanner na kodu QR ci sa telefon buñu tëjoo ci diiru 5 seconde bi nga nekkee ci biir duus, dañuy am seetu live bu bépp waxtaan buñ encrypté ci seen navigateur portable.
Ni ñuy denc firnde stalkerware ngir poliis wala àttekaay famiy te doo yëgal ki lay xaftal
Sudee danga bëgga wut sàrt buy tere fitna ci biir kër (àtte aar), daanel ab ñaawtéefi cyberstalking, wala nga joxe firnde ci yoon buy yar xale, bul jël nataal ci telefon bi feebar bi ci boppam (ndax stalkerware bi wala bibliothèque foto cloud biñ séddoo dina jël nataal yi ci saasi telefon bi dafay yàq mbiri forensiik yi). Lu moy loolu, jëfandikoo ñaareelu telefon bu xarañ wala kamera dijital bu wuute ngir foto ak enregistre wideo ci ekraŋu telefon bi feebar bi di wane:
1. App bi degisewu ci biir Settings > Accessibility ak Settings > Apps (dellu ci suuf ngir wane fi instalaasioŋ bi bawoo ak sañ-sañ yi).
2. ñi laago Google Play Protect toggle wala nanguwul Location Sharing xooltu.
3. IMEI / Nimero Serial bi am ci biir telefon bi Settings > About Phone ci benn wideo clip bi wéy suko defee àttekat bi mëna gis ekraŋ yi bokk ci sa aparey.
4ème partie: Kaaraange sa routeur Wi-Fi ci kër gi ak tabax baseline bu sell¶
Soo amee jàmm ci sa yaram ba noppi nga mëna dagg bépp nit ku lay dugg wala ku lay fitnaal, tëj sa reso bu kër gi ak say aparey ci yoon wii:
- **Bësal pax miy reset usine bi ci sa routeur Wi-Fi **: Sudee sa àndadoo bu njëkk, ki nga nekkal, wala pirat bi musa xam baatu-jàll admin routeur bi, defal aplikaasioŋ mobile bu jaaykatu routeur bi (lu melni Eero, Netgear Nighthawk, TP-Link Deco wala Google Nestphone, wala) jëfandikoo ci fu sori / DDNS, soppi sa baatu-jàll Wi-Fi kese doyul. Tëyeel pax mi reset physique bi ci ginaaw routeur bi 15 seconde, nga defar routeur bi ci suufu kontu cloud bu bees, sos baatu-jàll admin routeur bu bees, defar tur reso Wi-Fi bu bees (SSID) ak WPA2/WPA3 baatu-jàll, ak **deactivate UPal) P ak Play.
- **Toxal kamera yu xarañ yépp, loke yi, ak tele yi ci reso bu "Guest Wi-Fi" buñ tàqale **: Taalal sa routeur Reseau Wi-Fi Guest (ak "Client Isolation" bi) te nga boole bépp kamera bu xarañ, monitëru xale ba, fiil yu xarañ yi, aspiratëru robot yi, ak reso portable yu xarañ yi ci sa reso portable bu xarañ bi. Su loolu amee, aparey bu xarañ biñ laal du mëna scanner wala déglu sa ordinatëru bopp.
- Defal reset usine bu sell (wala wecci) telefon bu am feebar bi:
- Ndax stalkerware bu xóot bi mën na nëbb fichier yiy wéy wala profile configuration yiy mucc ci dindig aplikaasioŋ bu yomb, benn anam bi wóor 100 pursaa ngir setal telefon bu am stalkerware buñ samp mooy ** Reset Factory bu mat ** (
Settings > System > Reset options > Erase all data (factory reset)ci Android, walaSettings > General > Transfer or Reset iPhone > Erase All Content and Settings, wala ordinatër Delloosi Mode DFU, ci iPhone). - ** CRITICAL **: Sooy defar telefon bi ginaaw reset usine, ** BULEEN tànn "Delloosi ci iCloud / Google Cloud Backup" **, ndax defaraat ab nataalu aparey bu mat mën na ci saasi yebbiwaat app stalkerware bu nëbbu bi wala jekkal yi ci saasi ci telefon bu sell bi. Lu moy loolu, tannal "Dafar ni aparey bu bees", dugg ci kontu cloud bu bees wala bu wóor bu mat sëkk, ba noppi nga yebbi app yi nga xamee ci App Store wala Play Store ofisel bi kese.
Siberstalking ofisel ak jumtukaayi kaaraange IoT
Ngir am tegtal yu xarañ yu lalu ci ñi mucc ci fitnaal bu xarala yu bees yi yombal, xoolal Reseau national ngir jeexal fitna ci biir kër (NNEDV) Safety Net Project (techsafety.org) ci Etats Unis, Kaaraange Tech Refuge (refugetechsafety.org) ak Santu Kaaraange Siber Réew mi (ncsc.gov.uk) ci Royaume-Uni, Koalision buy xeex Stalkerware (stopstalkerware.org, International), ak Komisaaru Kaaraange (esafety.gov.au) ci Australie. Soo bëggee yëgal ni dañu la jàpp ci Etats Unis, nga def plainte ci FBI Centre de Plainte Crime de l'Internet (ic3.gov) ak sa departemaa police bi la gëna jege.
Laaj yi ñuy faral di laaj¶
Ndax amna ku mëna samp stalkerware wala spyware ci sama iPhone wala telefon Android ci yonnema mesaas wala wooma sama nimero?
Ngir 99.9 ci teemeer boo jél ci askan wi, deet. Li ñuy woowe "zero-click" spyware buy jàpp ab telefon bu yeesal te doo klike ci dara mbaa joxe sa telefon buñu tëjoo lu tollu ci ay milioŋ ciy dolaar te lisaas bi ñu ko jox ci kurelu nettali yu réew mi di yuuxu ci njiitu réew yi, dippolomat yi, mbaa fippukat yu mag yi. Daanaka ci bépp kër, relation, wala konsomatër stalking cases, spyware bi dañu ko samp ndax nit ki dafa tëye sa telefon bu tëju ci loxoom ci diir bu gàtt 3 ba 5 simili, wala ndax ñu xam wala xam sa baatu-jàll Apple iCloud wala Google Account ba noppi dugg ci sa cloud backups ci fu sori.
Lan moo waral sama batëri telefon di gaawa jeex, di tàng, ndax loolu dafay firndeel ni amnaa stalkerware?
Bi batëri bi gaaw di jeex, tàngoor wuñu xamul suñu nekkee ci liggéey, ak gëna yokk ci jëfandikoo done selulaar yu weer wu nekk, màndarga yu yàgg lañu ci stalkerware Android bu baaxul (biy dawal chip GPS bi saa yu nekk, di yebbi enregistremaa yu ekraŋ ci ginaaw), màndarga yooyu mën nañu bawoo ci batëri bu màgget wala aplikaasioŋu reso sosio bu yàgg. Dunga xalaat ci tàngooru batëri bi, defal xool bu 3 simili: xool Jekkal yi> Mën jëfandikoo> Aplikaasioŋ yiñ samp, Jekkal> Kaaraange> Aplikaasioŋu Admin aparey, tolluwaayu Google Play Protect, ak Xool Kaaraange Apple.
Suma defee buum kuuraŋ bu ñuul ci kaw lensu kamera bu xarañ bi, ndax pirat bi dina may dégg may wax?
Waaw. Soo muur lenti weer wi ak buum kuuraŋ wala gliiseur plastik, loolu du lenn ludul fat wideo bi; Mikro kondensatër biñ tabax ci kaw tablo sircuit kamera bi dafay wéy di dox 100 pursaa, te mën na déglu bu baax waxtaan yi ci biir néeg bu dal wala lal. Benn anam bi nga mëna garantie ni kameraa bi am xel wala monitëru xale bu am Wi-Fi mënu la gis wala dégg mooy nga dindi fiil biy boole kuuraŋ bi ci prise bi (nga dindi bépp batëri bu nekk ci biir).
Nan la sama ex-partner mënee xam barab bu nekk buma dawal tay sudee xool naa sama telefon ba noppi ma fay Seet Sama / Google Location Sharing?
Amna ñaari vecteur yu ñuy xàddi bu baax sudee sa telefon ci boppam set na. Bi ci njëkk mooy, sooy dawal oto buñ defaree ci 2016, sa jàppante bu njëkk mën na dugg ci aplikaasioŋu telefon bi defarkatu oto bi (lu melni FordPass, MyChevrolet, Toyota, Tesla, Hyundai Bluelink, wala Subaru Starlink), biy wane barabu GPS bi oto bi nekk ci kàrt 24/7. Ñaareel ba mooy mën nañu nëbb ab toppukaayu Bluetooth bu ndaw (lu melni Apple AirTag, Tile, Samsung SmartTag, wala Pebblebee) wala ab toppukaayu GPS bu am ay magnet ci biir sa pëno, ci biir bagaas bi, wala ci suufu chaise auto. Xoolal sunu tegtal biñ jagleel toppukaayu GPS ak AirTag stalking ngir am tegtali bale oto physique.
Ndax sarwis yi ci net bi wala pirat yu Instagram yiy wax ni dina ñu "scan wala dindi espionage yi ci fu sori" wala "piraatewaat ci telefonu sa jabar" yoon lañu?
Déedet, bépp kontu bu nekk ci reso sosio yi, Telegram, wala WhatsApp buy wax ni mën nañu scanner sa telefon ci nimero IMEI wala ñu dugg ci kontu keneen ngir fay, dafay njuuj njaaj ak njuuj njaaj. Bul musa fay xaalis wala jox sa nimero telefon wala IMEI ci net bi "pirat yu defaraat." Jëfandikool rek jekkal sistem operasioneel biñ leeral ci tegtal bii, Xool Kaaraange ofisel bu Apple, Google Play Protect, wala nga yóbbu sa aparey ci avocat buñ sertifiye ci wàllu fitna ci biir kër wala ci entreprise forensique ordinatër bu wóor.
Lan mooy xeetu monitëru xale bu gëna wóor buñu ma mëna jënd sudee bëgguma jaaxle ci pirat yi ci net bi?
Jëndeel benn monitëru xale bu am wideo dijital bu amul Wi-Fi, buy jëfandikoo FHSS (Spectrum bu tasaaroo ci fréquence) wala xaralay radio DECT 6.0 bu tëju. Ndax monitër yi amul Wi-Fi amul chip Wi-Fi, duñu musa jëflante ak sa routeur kër, te amul app smartphone wala kontu cloud, physiquement pirat internet mënul am fépp ci àdduna bi jëfandikoo wideo wala audio stream.
Saytu nañu ay balluwaay¶
- Kaaraange siber ak kuréel gi yor kaaraange jumtukaay (CISA) ak Biro federoo buy amal lànket (FBI, Etats Unis): Kaaraange jumtukaayi Internet ci kër yu xarañ yi (IoT), wàññi jàpp kamera yi, ak tegtal ñiy konsome ci Stalkerware.
- Reseau national ngir jeexal fitna ci biir kër (NNEDV Safety Net Project, Etats Unis): Jumtukaayu Kaaraange Xarala yu Bees ak Njaboot ngir ñi Mucc: Jàppale losisel yu espion, Fitna ci kër gu xarañ, ak Kaaraange Dawal bu lëkkaloo.
- Centre National de Sécurité Cyber (NCSC, Royaume-Uni): Kamera yu xarañ yi: Jëfandikool leen ci anam wu wóor ci sa kër, ak tegtal ngir ñi mucc ci fitnaal ci kër ci wàllu kaaraange aparey yi.
- Koalision buy xeex losisel yiy jaay nit ñi (kuréel buy liggéey ci àdduna bi/ Fondation frontière électronique, Kaspersky, Malwarebytes, Avast, NNEDV, WEISSER RING): Màndarga yiy wane losisel yiy jaay nit ñi, anam yi ñuy gisee ci anam wu wóor, ak sàrt yiy baña yokk jafe-jafe yi.
- Kaaraange Platform Apple (Etats Unis): Gitu Jëfandikukat ci Kaaraange Bopp ngir Aprey Apple: Jëfandikoo Xool Kaaraange ci iOS, Xool Profil Tabbu, ak Mode Lockdown.
- Komisario eSafety (Nguuru Australie, Australie): Njëfandikoo Xarala yu Bees yi: Xool jumtukaayi kër yu xarañ yi, kontu cloud yi, ak logiciel espion mobile ci anam wu wóor.