A security researcher discovered an SQL injection vulnerability in the Catwatchful stalkerware service, leading to the compromise of over 60,000 user accounts, including plaintext logins and passwords. After reporting the vulnerability, actions were taken to shut down the service and investigate its operators, highlighting the risks associated with such spyware applications.
A security flaw in the covert surveillance app Catwatchful exposed sensitive data, including email addresses and passwords, of 62,000 users due to a SQL injection vulnerability. While the app is marketed for parental monitoring, its stealth features raise concerns about misuse for malicious purposes.