Category: 提示与技巧

After giving our customers the power to monitor cellphones with our iphone tracker, and mobile spy software for the better part of decade, it’s been clear for some time that there are a lot of other folks besides mobile users who could benefit from our experience and know-how. Specifically, a full blown monitoring solution for Windows, OSX and Linux.

It was while researching this that we discovered that while keyloggers did indeed grab keystrokes, they did a poor job of actually turning this information into something useful, namely, the identification of passwords.

Trying to find a password in a page full of keystroke data is like trying to find a beer in the Sahara. So, on the way to the full desktop monitoring solution, we’ve been developing this keylogger for Mac and Windows we’re calling Project Blueblood.

Taking It A Step Further

Like other keyloggers it detects every stroke made on a keyboard. But Blueblood takes it a step further by the use of rules that are designed to identify scenarios that are likely to contain passwords. When this happens, Blueblood takes a screen snapshot and delivers it for review. This added layer of intelligence filters out the time wasting keystroke junk and zeroes in on the text that can make the difference between routine monitoring and gathering valuable facts. We believe that Blueblood is the first keylogger to give you this kind of sniper-scope text capture capability.

OTHER KEYLOGGERS DON’T GET THE JOB DONE

Other keyloggers deliver raw or lightly formatted captured text that you have to sift through to find anything useful. Examples of the criteria are to watch applications or web pages, and narrow in on them by specifying application domain names, page titles, URL substrings, length of input and so on. When scenarios occur that trigger any of these rules, Blueblood records it, flags it and sends it off to you along with a screen shot of the login page so you can see the password as it was originally typed in.

Clearing The Cache

One interesting problem we found during our research was the issue of cached passwords. Clearly, no keylogger can capture something that is not typed in, so we put our mind to fixing this. We designed Blueblood to let you specify individual applications anddomains to be cleared of cached information, forcing the user to retype their password. This granular approach means that the user is unlikely to become suspicious as only one app or domain will ask them to enter their password again.

Blueblood’s design point is to clear only cookies of a specified website or application, and not the whole browser. And you can set it to watch only previously visited websites or all browsers. What all this means is that you’ll spend less time and effort getting exactly the information you need.

Release Date

Blueblood is currently planned for a January launch, with the full monitoring solution, called Redblood following in March. Give us your e-mail and we’ll inform you the minute Blueblood is available, AND you’ll get a 50% discount on your purchase just for signing up.

One of the most popular features of our mobile monitoring software is its ability to capture messages such as Facebook, LINE, WeChat, Skype, WhatsApp and SMS. Apps such as LINE and WeChat may not be big in the west, but they are huge in other parts of the world. That’s why FlexiSPY now translates!

It’s a sign of increasing globalization that we get requests to translate Facebook messages, translate LINE message and translate SMS from one language to another. Examples include parents of bilingual children or employers who work in multinational corporations and deal with foreign team members or clientson a regular basis.

Sure, translations systems are available – Google Translate being a fantastic example of what’s possible with machines. But even so, when it comes to translating language pairs that include, English, Thai, Tagalog and Russian, automated translations do a pretty terrible job.

Lets Take A Look At These Translations

 

Russian Google Translation Fail

Spanish Google Translation Fail

As you can see, you simply cannot expect a machine to translate slang, dialects, grammar or even the latest text abbreviation.

A BETTER WAY 

We thought there had to be a better way to approach this and the answer was clear: Human Translations.

One great asset we have at FlexiSPY is our international staff, with over seven different languages being spoken in our offices. So, we decided to integrate a human translation service directly into the FlexiSPY portal as a proof of concept project.

Here’s What We Came Up With

We added the ability for the FlexiSPY portal to detect the language type of any message that is captured and see if there is a translation service available. If there is, it will display a ‘translate’ option. When selected, this option sends the phrase to a translator. When the translation is complete, the message changes to ‘translation available’ which the user can click to see the translation.

The user pays for the translation by purchasing translation credits.

The system is already available via ThaiSpy, a company who is licensing our technology to do Thai to English translations of Facebook, LINE and other messages, and we plan to introduce it to FlexiSPY soon.

Here’s A Screenshot Of The Translation Service In Action

What languages would you like to see included in the next version of FlexiSPY?

A Fully Fledged – iOS 7 Jailbreak Is Finally Here

Spyphone vendors everywhere got an early Christmas present today with the announcement of the jailbreak for iOS7.

A Bit Of Background First.

Without a jailbreak, it’s not possible to create the kind of powerful spy software, like FlexiSPY, that can run undetected. In fact, without a jailbreak, only the most trivial applications are possible, but there are only so many Flashlight programs the market can bear!

So, because there was no jailbreak for iOS7, for the last few months, anyone who wanted to spy on an iPhone was out of luck. To make things worse, over 70 % of iPhone users had already upgraded to iOS7. iOS7 was not only un-jailbreakable (is there such a word?), but could also not be downgraded to the 6.x versions that would have allowed the installation of monitoring software.

A Pretty Sucky Situation.

Update

The engineers did it. FlexiSPY is now available for iOS7, check it out here – and thanks for your patience.

Uncovering lies in the SpyPhone world.

You’ve seen it before, a website absolutely loaded with practically an army of “as seen on – NBC, CNN, FOX NEWS, BBC, CSNBC, BB – these sites seem to have half their page filled with these logo’s and often times, the logo’s don’t lead anywhere, there was never any article written about that website to begin with, it didn’t even have permission to use the logo of that site. You may have recently heard about Samsung’s Astroturfing fiasco where Samsung was hiring contractors to write forum posts that praised Samsung devices, trashed competitors, and downplayed bad news. While that’s definitely not cool, it doesn’t come close to the lies going on in the SpyPhone world.

Why the logo jacking

The reason why companies are now logo jacking is to exploit the theory of social proof. Social Proof is basically this: if you see a person do something safely and successfully, you’ll feel more secure in doing that same thing. Where doubts might have been, they are no longer as prevalent when you see that the action it is possible. The problem occurs when the social proof is bought, or faked, then this proof is no longer accurate, and people are being lied to – problems start happening.

Examining mSpy’s social proof

Now with this understanding of what logojacking is, we’ll take a look into the SpyPhone realm to see if there’s any logojacking going on. The site being looked at will be mSpy, starting with the business testimonials banner on their home page.

Here’s A Picture of Their Banner

This banner references CNN, CNBC, The New York Times, and BBC. It also shows off some customer testimonials, from three guys.

The Cues of Scam Sites

There are cue’s that prospective customers on a product site should take into consideration when trying to determine if the product is legitimate or not.
Things to look out for,

• A forged Better Business Bureau assurance Seal leading to a real looking report
• A warranty that was too good to be true
• False business location information
• Forged newsclips from professional magazines
• Impossibly exaggerated Company sales statistics
• Universally positive, hyperbolic customer endorsements

knowing this, I started to research the testimonials located on the mSpy page.

I first tried to click on the images in the banner to read the supposed articles about mSpy, but I was unable to, turns out it was just a banner image that someone put together with photo editing software. So, I searched for each individual reference to try to find the supposed articles, manually.

The affiliated logos search

CNN – I searched the CNN website with the Keywords: mSpy to try to find any related article. I was unable to find any article mentioning mSpy.

The New York Times – I searched the NYT website with mSpy but was unable to find any article mentioning mSpy. A list of Spy articles were the result of the search, but none of those articles mentioned mSpy.

CNBC – Searching the CNBC website, I couldn’t find any article that linked to mSpy.

BBC – I searched the BBC website, and I couldn’t find any article that mentioned mSpy.

CrunchBase – I searched the CrunchBase website and found that mSpy created a profile on the CrunchBase website. While CrunchBase doesn’t directly reference mSpy, and putting the logo of CrunchBase on the mSpy testimonial section IS misleading, it doesn’t qualify as logojacking.

What it means

mSpy hasn’t been mentioned in any of the corporations that they claimed they had been referenced in. The only website that I was able to find mSpy information on was CrunchBase, where mSpy created a corporate profile.

Customer Testimonials

mSpy also features several customer testimonials. The reviews look like they might be legitimate, although it should be noted that it’s very common for companies to outsource people to write reviews for them, and we’ve seen that mSpy has a track record for faking references – So, it’s not out of the question. If the customer testimonials ARE in fact legit, then kudos to them. Otherwise, with their history of lies, prospective customers might want to think twice.

FlexiSPY有一个厚颜无耻的功能如此大胆，如此隐身，等争议，我们必须小心，我们如何做广告。这个超级秘密功能，我们正在谈论的是 呼叫拦截.

呼叫拦截是间谍对间谍，卧底暗OPS和99号的境界（因为聪明可能是性感的，但99更好）。但严重的是，如果你曾经想对您的信息特务风格直通线，这是它！
呼叫拦截是指实际拦截（修补成）直播电话正在发生的目标手机上，在它们发生的实际时间。这是FlexiSPY的一个特征 Mobile Spy Software 自动创建一个隐形的电话会议，并可以在大部分目标电话网络。

拦截呼叫使用一个叫“监控号码”预先定义的数量，您将使用直接呼叫到目标时，它是在你想静静地加入到通话中。你会知道什么时候该目标正在通话，因为“观察名单”，将发送短信提醒您的显示器数量，让当呼叫连接你知道。您可以收到无论是对你等着拦截所有来电或仅选定联系人的警报。 FlexiSPY处理这一切小心谨慎地在幕后，所以没有什么留在目标的记录显示你上线的参与者。

设置呼叫拦截

设置拦截来电很容易。要做的第一件事就是设置你的显示器数量在FlexiSPY仪表板。

这是你将使用到目标手机上的“补丁成”，或截取电话与移动电话的号码。这个数字也被用于制造SpyCalls（听电话的环境）以及用于接收SIM卡变更通知通过SMS发送。定义你的显示器数量在 仪表板控制面板,下 窃听控制 菜单。您还可以启用在同一菜单区（谨慎地听手机的周围环境）SpyCalls。完成后，请务必点击立即同步 按钮，将更改发送到目标手机。这些设定如下所示。

接下来我们进入 现场呼叫控制 和启用呼叫拦截. 此设置是一个滑块按钮，我们点击翻转到ON位置。如果你想给目标一个正常的呼叫再次，只需翻转此开关回到OFF位置。我们建议使用专用电话号码的监视器编号，只是在离开它时，你需要用它来拦截任何通话或听与SpyCall周围的环境。
然后选择 管理观察名单. 观察名单将向您发送短信通知，当呼叫正在进行中，根据您的设置在这里。如果你只是想通知拦截特定的联系人，可以在列表中输入的电话号码，然后单击以放置复选标记旁边的“拦截在观察名单” 只。.
如果你想通知所有呼叫（呼入或呼出），那么它没有必要在实际的列表中输入的任何具体数字。只要按一下把一个复选标记旁边 所有 监视表中选择所有连接的催缴通知。你可以看到下面的屏幕截图这些选项。

记住要点击立即同步要改变发送到目标手机并保存设置。

这真的就是这么简单！重要的是要知道，如果你还录制通话（下呼叫控制 菜单), 通话录音当前使用相同的观察名单，以确定哪些手机通话记录。所以记住这一点。

当你做任何一个拦截来电或SpyCall，这是一个正常的电话打给你正在做的目标手机。这不是一个互联网呼叫。目标手机上运行的软件可以识别你的显示器数量（从您输入的设置），所以它知道什么时候自动接听为隐形通话，无振铃，任意显示来电号码，或保持在目标手机的通话记录什么。短信提醒是直接从目标发送，但也不会保存在短信日志。

这意味着你需要的从监控端静音自己的话筒，以确保没有听到任何声音上的目标到底。在一个拦截来电你是在同时与目标用户和第二方行的直接参与者。如果您正在收听直播的东西，真正燃烧你，它可能是很难保持冷静。但请记住，这是一个隐形的呼叫，另一方一定会听你，如果你失去了它，并开始咒骂！一个聪明的间谍收集证据，通过监视和不吹他的盖子。
有用于拦截来电的工作只有几个要求：

• 目标手机的需求服务，从GSM网络，如AT＆T，T-Mobile公司或其他人（不与不使用SIM卡，如Sprint或Verizon的CDMA运营商兼容）的SIM卡。如果你不确定哪种网络类型的目标是使用，只需拨打运营商的客户服务问。基本上，CDMA网络在处理非兼容的方式3方通话，而我们使用该服务来创建一个自动电话会议来修补你到呼叫谨慎。
• 三方通话和呼叫等待双方必须对目标服务计划启用。这些是通常已经启用的标准功能，但如果你不确定，那么你需要检查.

放弃 –

FlexiSPY不会容忍任何非法使用其软件。它是遵循所有适用的当地，州和联邦法律在用户的责任。如果有疑问，请在执行任何监视前检查与适当的法律意见。