A stalkerware maker who was banned from the surveillance business after a data breach that uncovered the non-public data of its clients, in addition to the individuals they had been spying on, will be unable to return to promoting the invasive software program, in accordance the U.S. Federal Commerce Fee.
The FTC denied a request to cancel that ban made by Scott Zuckerman, the founding father of client spyware and adware firm Assist King and its subsidiaries SpyFone and OneClickMonitor.
On Monday, the FTC introduced the denial in a press launch after Zuckerman petitioned the federal watchdog to rescind or modify the ban order in July of this yr.
In 2021, the FTC banned Zuckerman from “providing, selling, promoting, or promoting any surveillance app, service, or enterprise,” successfully stopping him from operating one other stalkerware enterprise. The company additionally ordered Zuckerman to delete all the information collected by SpyFone, in addition to to bear frequent audits and set up sure cybersecurity practices for his companies.
“SpyFone is a brazen model title for a surveillance enterprise that helped stalkers steal personal data,” stated Samuel Levine, then appearing director of the FTC’s Bureau of Shopper Safety. “The stalkerware was hidden from system homeowners, however was absolutely uncovered to hackers who exploited the corporate’s slipshod security.”
In his petition, Zuckerman claimed that the FTC order’s security necessities have made it tougher for him to run his different companies attributable to monetary prices, even if Assist King is now not in operation and he now solely runs a restaurant and plans different “tourism ventures” in Puerto Rico, in response to the petition.
When reached through e mail, Zuckerman declined to remark and referred inquiries to his lawyer.
Techcrunch occasion
San Francisco
|
October 13-15, 2026
The FTC ban stemmed from an incident in 2018, when a security researcher discovered an Amazon S3 bucket belonging to SpyFone that left extraordinarily delicate knowledge — together with selfies, textual content messages, chat app messages, audio recordings, contacts, location, hashed passwords and logins, and extra — uncovered on-line for anybody to see and entry.
The uncovered knowledge included 44,109 distinctive e mail addresses and, in response to the researcher who discovered the breach, “at the least 2,208 present ‘clients’ and lots of or 1000’s of images and audio in every folder” from 3,666 telephones that had the SpyFone stalkerware put in on them.
Contact Us
Do you might have extra details about stalkerware makers? From a non-work system, you may contact Lorenzo Franceschi-Bicchierai securely on Sign at +1 917 257 1382, or through Telegram and Keybase @lorenzofb, or e mail.
Lower than a yr after the 2021 FTC order, information.killnetswitch reported that Zuckerman gave the impression to be operating one other stalkerware firm. In 2022, information.killnetswitch acquired a trove of breached knowledge from stalkerware app SpyTrac. The info revealed that SpyTrac was run by freelance builders with direct ties to Assist King, in what gave the impression to be an try to avoid the FTC’s ban. Moreover, the breached knowledge included information from SpyFone, which Zuckerman was ordered to delete, and keys to entry the cloud storage of OneClickMonitor, one other one in every of his stalkerware apps.
Eva Galperin, a distinguished skilled on stalkerware, celebrated the information. “Mr. Zuckerman was clearly hoping that if he laid low for just a few years, everybody would overlook concerning the explanation why the FTC issued a ban not solely in opposition to the corporate, however in opposition to him particularly,” Galperin advised information.killnetswitch.
information.killnetswitch’s revelation in 2022 that Zuckerman apparently violated the FTC ban, “means that Zuckerman didn’t study his lesson,” added Galperin, who’s the director of cybersecurity on the digital rights nonprofit Digital Frontier Basis.
Stalkerware apps permit their clients to surreptitiously spy on the telephones and gadgets of their family members. Along with enabling doubtlessly unlawful actions, for the final eight years, there have been at the least 26 stalkerware firms which have been hacked or left delicate knowledge uncovered on-line, in response to information.killnetswitch’s tally. These repeated incidents present these firms have repeatedly failed to guard the privateness of their clients, in addition to the individuals they spy on.
