A security researcher uncovered an SQL vulnerability in stalkerware Catwatchful, allowing him to steal a database with 62,000 user accounts, including administrator credentials.
Exclusive: Data breach reveals Catwatchful 'stalkerware' is spying on thousands of phones
Catwatchful is spyware masquerading as a child monitoring app that claims to be "invisible and cannot be detected," all the while uploading the victim's phone's private contents to a dashboard viewable by the person who planted the app.