27 Sep 2007
Security experts have slammed applications used to spy on mobile phone users.
The warning from researchers at F-Secure comes as a growing number of programs are being launched to track and record mobile phone conversations and text messages.
Such software is chiefly marketed at those who suspect a partner of having an affair, or to monitor children's telephone activity.
F-Secure experts claim that, far from providing security, this type of software could allow anyone to access the information collected.
For example, they demonstrated to vnunet.com that it possible to find call times, numbers dialled and SMS messages from users of Mobile Spy software.
"They are not building this stuff to make people secure, they are building it to make money," said Sean Sullivan, a senior researcher at F-Secure.
"It would be easy to build a software tool that could automatically scan and record the information from anyone who had ever used the service."
Mobile Spy states on its website: "By purchasing from an established company that has been creating spy software products since early 2003, you can rest assured you will receive professional grade software and service.
"With Mobile Spy there is no need to trust an offshore company with your confidential data."
F-Secure designates such software as 'malware', since the code can run without the user's knowledge. Legal authorities in Britain have also stated that the Flexispy application from Flexispy.com may well be illegal.
Symbian, however, has defended such software's use, maintaining that it has legitimate applications.
Latest stories from Security
Related videos
Related articles
Related jobs
Poll
What will be the biggest change to corporate technology in the future?
TFL director of Games transport Mark Evers discusses how the public transport network is preparing for this summer's event
Connect with V3.co.uk
The wrong printers, for the wrong tasks on the wrong contracts
Who leads the BI pack and who should we be watching out for?
Head of Compliance My client is currently seeking...
THis role is working for a multi national Financial organisation...
Professional Services Consultant - Data Protection, Backup...
Web Support Analyst (Drupal, Joomla or Wordpress, CMS...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Stunned!!!
I can't believe that legal authorities have only stated that Flexispy "may be illegal." On the basis that this is installed on a privately owned phone: If it is installed on your phone without your permission, surely the person who installed it is in breach of the Computer Misuse Act? By holding such information, shouldn't Flexispy be registered under the DPA, and inform people that they are holding such information or be in breach? I also suspect that interception of telephone conversations and emails is in breach of Article 8 of the European Convention. If this were to be installed on a company mobile, it would have to be declared as part of company policy, so that all staff are aware that it is in place, the same as rules on email usage. Apparently "Flexispy forwards any SMS or email message sent on the phone to a third party, and monitors the phone's call logs." Who is paying for this? If it is the owner of the phone, I suspect that either Flexispy or whoever installed the software is guilty of theft, as the phone's owner is paying for the message being forwarded. Any legal people out there who can comment? I'd seriously like to know the answers.
Posted by: Kevin B 27 Sep 2007