Security breach reveals Catwatchful spyware is snooping on thousands of phones – here’s how to stay safe

By Craig Hale

Security breach reveals Catwatchful spyware is snooping on thousands of phones - here's how to stay safe

Skip to main content

Tech Radar Pro

Tech Radar Gaming

Tech Radar Pro

TechRadar the business technology experts

Search TechRadar

View Profile

België (Nederlands)

Deutschland

North America

US (English)

Australasia

New Zealand

Expert Insights

Website builders

Web hosting

Best website builder
Best web hosting
Best office chairs
Best antivirus
Expert Insights

Recommended reading

These three stalkerware apps have just gone dark, and a data breach could be to blame

This dangerous new malware is hitting iOS and Android phones alike – and it’s even stealing photos and crypto

Spyware combing for data ‘of use to China’ hidden inside religious and cultural apps

Major data breach at popular hookup app leaks data on millions of users – see if you’re safe

Watch out, your work mobile apps could be a huge security risk – here’s what to look out for

Cyberattacks on smartphones hit new high – here’s how to stay safe

Worrying attack sees 10,000 records allegedly belonging to VirtualMacOSX leaked – here’s what we know

Security breach reveals Catwatchful spyware is snooping on thousands of phones – here’s how to stay safe

Craig Hale

3 July 2025

Beware if you’ve downloaded Catwatchful spyware

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

Image Credit: Flickr
(Image credit: Shutterstock)

Catwatchful data leak affects 62,000 victims, including 26,000 victims’ phone data
The dodgy developer outed himself by reusing an email address
Google has committed to warning users about the app

Security researcher Eric Daigle has revealed information about a serious data breach affecting Catwatchful, an Android spyware app disguised as a child monitoring tool.

A full user database with plaintext passwords and email addresses affecting over 62,000 users has been leaked as a result, with phone data like messages, photos, location, mic and camera feeds also putting 26,000 victims at risk.
According to the report, the spyware app runs in stealth mode hidden from users, collecting and uploading information.

You may like

These three stalkerware apps have just gone dark, and a data breach could be to blame

This dangerous new malware is hitting iOS and Android phones alike – and it’s even stealing photos and crypto

Spyware combing for data ‘of use to China’ hidden inside religious and cultural apps

Catwatchful app is full of spyware
As is typical from stalkerware like this, Catwatchful is an app that operates outside of the Play Store, requiring physical installation via a process known as sideloading.

The app’s admin, Uruguay-based developer Omar Soca Charcov, has been exposed because the email he used for Catwatchful had been reused on LinkedIn.
Daigle also noted that Charcov’s admin account was the first record in the breached database, with password recovery linked to his personal email address.
The data was stored on Google Firebase, sent via a custom API that was unauthenticated, resulting in open access to user and victim data. The report also confirms that, although hosting had initially been suspended by HostGator, it had been restored via another temporary domain.

Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
Most affected devices affect users in Mexico, Colombia, India, Peru, Argentina, Ecuador and Bolivia.
Daigle was able to exploit a SQL injection vulnerability to get access to the database, leading him to conclude that Firebase was not the source of the vulnerability, but rather the API.
Google has been notified, and although the app isn’t distributed on the Play Store, the company has added Google Play Protect alerts for Catwatchful.
To stay protected from threats like this, it’s important to use the best antivirus software, reliable malware removal tools, and strong endpoint protection.
Even well-known apps and tools can have flaws, so running trusted security software and keeping all apps current helps reduce the risk of malware slipping through unnoticed.
You might also like

New spyware found to be snooping on thousands of Android and iOS users
Why not install one of the best Android antivirus apps to stay safe
Check out the best business VPN tools to keep protected as well

With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

These three stalkerware apps have just gone dark, and a data breach could be to blame

This dangerous new malware is hitting iOS and Android phones alike – and it’s even stealing photos and crypto

Spyware combing for data ‘of use to China’ hidden inside religious and cultural apps

Major data breach at popular hookup app leaks data on millions of users – see if you’re safe

Watch out, your work mobile apps could be a huge security risk – here’s what to look out for

Cyberattacks on smartphones hit new high – here’s how to stay safe

Latest in Security

The AI-powered future of ransomware is coming soon – here’s what we need to look out for

Cisco warns of a serious security flaw in comms platform – and that it needs patching immediately

Google has patched another urgent security flaw in Chrome – so update now or be at risk

Security experts flag another worrying issue with Anthropic AI systems – here’s what they found

Insurance group Kelly Benefits says over half a million people now affected in major data breach – here’s what we know

AT&T has a new tool to stop dangerous SIM swapping attacks – here’s how it will keep you safe

Latest in News

An unannounced MMO from The Elder Scrolls Online developer has been canceled by Xbox after seven years of work

The Pixel 6a will get a mandatory update that will ‘reduce battery capacity’ soon – and other Pixel phones could be next

HPE and Juniper confirm merger deal

Phil Spencer somehow thinks that Xbox has ‘never looked stronger’ as multiple games are canceled

Nobody wants 8GB GPUs from Nvidia and AMD – and this retailer just made that clear

More Samsung Galaxy tri-fold specs have just leaked – but it could be a while before you can buy it

LATEST ARTICLES

Nobody wants 8GB GPUs from Nvidia and AMD – and this retailer just made that clear

Netflix just added my favorite sci-fi thriller series in July – here’s why you should make it your next binge watch

An unannounced MMO from The Elder Scrolls Online developer has been canceled by Xbox after seven years of work

One of our best Amazon Alexa speakers is over a third off in the early Prime Day sale – and I’m seriously thinking of upgrading

Grab an AMD Ryzen 7 5700X CPU for $99.99 with Newegg’s Prime Day busting deals, $40 cheaper than at Amazon and its lowest price ever

TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.

Contact Future’s experts

Terms and conditions

Privacy policy

Cookies policy

Advertise with us

Web notifications

Accessibility Statement

Future US, Inc. Full 7th Floor, 130 West 42nd Street,

Please login or signup to comment

Please wait…

Read More…