Thousands of Apps Hijacked to Spy on Your Location

Wired Magazine and 404 Media are currently reporting a hack of Gravy Analytics, a data location company which reveals a long list of apps that are being used to collect your location data. Based on current reports, it appears a large number of data brokers and ad companies are harvesting this data and then repackaging them for resale to companies like Gravy and commercial and government clients alike.

From the article: “For the first time publicly, we seem to have proof that one of the largest data brokers selling to both commercial and government clients appears to be acquiring their data from the online advertising ‘bid stream,’” rather than code embedded into the apps themselves, Zach Edwards, senior threat analyst at cybersecurity firm Silent Push and who has followed the location data industry closely, tells 404 Media after reviewing some of the data.

More information about this hack and the subsequent revelation of the compromised apps can be found here:

https://www.wired.com/story/gravy-location-data-app-leak-rtb/

https://www.404media.co/hackers-claim-massive-breach-of-location-data-giant-threaten-to-leak-data/

The full list of the apps that are allowing your location data to be harvested can be found here:

https://docs.google.com/spreadsheets/d/1Ukgd0gIWd9gpV6bOx2pcSHsVO6yIUqbjnlM4ewjO6Cs/edit?gid=1257088277#gid=1257088277