Users leave digital footprints online and receive personalized ads based on their online activity. While ad networks generally protect personal data, spyware takes intrusions to a new level. Apps like Sharlock give attackers access to the contents of the victim’s device, including calls, messages, emails, and device control.

Developed by Israeli technology company Insanet, Sherlock can infect Windows computers, Android phones and iPhones. While his full capabilities are still being researched, it has been confirmed that he can infiltrate, track, capture, and transmit data without any known defenses against him.

What makes Sherlock different from his counterparts?

Unlike other spyware like Pegasus, which targets the iPhone due to vulnerabilities in iOS, Sherlock uses ad networks. Attackers tailor their ad campaigns to victims’ demographics and locations by embedding spyware in those ads. When potential victims view the ads, spyware is secretly installed on their devices.

Global distribution and use of spyware

Over the past decade, governments of at least 74 countries have purchased spyware for law enforcement, surveillance and cybercrime prevention. Companies and private investigators also use spyware for different purposes.

The Israeli government’s permission to sell Insanet spyware is worrying. But the high cost of the technology, estimated at $6.4 million per infection, acts as a deterrent to widespread abuse.