SecondEye is a product that was developed in Iran by a web and development company in Iran named UltimateSoft Co, and marketed as a parenting or employee surveillance tool. However, it has been reportedly repurposed and used as spyware known as EyeSpy. The malware is allegedly deployed by disguising it as a free VPN package and once installed on a target’s device, it is capable of monitoring and collecting personal data, including text messages, emails, call logs, and location data without the user’s knowledge or consent.
Iran has allegedly used it in a deliberate attempt to spy on individuals who might download VPN apps to bypass internet blackouts in the country.
This type of technology raises serious concerns about privacy, security and human rights. The use of spyware to monitor and collect personal data without the user’s knowledge or consent is a violation of privacy rights and could also be used for malicious purposes such as espionage, blackmail and repression.
It is important to be aware of these types of practices and to take steps to protect yourself from spyware by being cautious about downloading and installing unknown software, keeping your device and security software up-to-date and being vigilant about suspicious activity on your device.
This software/malware comes with a wide range of features that allows it to take screenshots, record microphone, log keystrokes, gather files and saved passwords from web browsers, and remotely control the machines to run arbitrary commands.
Read more: https://techmonitor.ai/technology/cybersecurity/eyespy-spyware-iran-vpn
The Dangers of Legal Malware https://blackpointcyber.com/resources/blog/eye-spy-the-dangers-of-legal-malware/
Internet blackouts in Iran https://ooni.org/post/2022-iran-technical-multistakeholder-report/