• Overview
    • Scam Map
    • Kill Chain
Recents

    Conversations will appear here

Technique

Stalkerware

Also known as: Spouseware, Intimate Partner Surveillance, Domestic Spyware, Monitor Apps, Parental Control Abuse, Creepware

EXPLOITATIONPERSISTENCE

Commercially available spyware installed on victim's phone (usually by intimate partner or family member with physical access) to covertly monitor location, messages, calls, photos, and browsing - often used in domestic abuse situations.

Common attack flows

How it fits in a scam

This technique shows up duringEXPLOITATION

Before

  • Phishing EmailDELIVERY
  • SmishingDELIVERY
  • MalvertisingDELIVERY
  • Poisoned SoftwareDELIVERY
  • +3 more

After

  • DoxingEXPLOITATION

Defense

How to defend against this

How to spot it

  • Battery drains faster than normal without increased usage
  • Device runs warm when idle or not charging
  • Unexplained high data usage
  • Phone takes longer than usual to shut down
  • Clicking static or echo during phone calls
  • Unfamiliar apps in settings that you did not install
  • Partner knows details of conversations or locations they should not know
  • Device settings changed like location services enabled or screen lock removed
  • Security software disabled without your action

Tools you can use

  • Remote Wipe / Find My DeviceCost low · Effect high
  • Antivirus SoftwareCost low · Effect medium
  • Mobile Security AppCost low · Effect high

Further reading

  • Malwarebytes

    Stalkerware detection and protection guide

  • Coalition Against Stalkerware

    Resources for stalkerware victims

  • NNEDV Safety Net

    Technology safety resources for survivors

Related techniques

Variants

  • Malware

Same stage

  • Account Takeover
  • Remote Access Tool
  • Authorized Push Payment Fraud
  • Synthetic Identity Creation
  • Email Forwarding Persistence
  • +14 more

Similar defense

  • Clipboard Hijacking
  • Malicious App Installation
  • Overlay Attack
  • Tech Support Scam
  • Supply Chain Compromise
  • +14 more