Republic of ihe Printings NATIONAL POLICE ¢ oT DIRECTORATE FOR Mee ees, AND BET Ne MANAGEMENT j (Carp BGen FtielT Grae: Chaszon Cry MEMORANOUM To See Distribution FROM OIC, DIDM SUBJECT . ACG Cyber ‘Security Bulletin No. 334 DATE Lie 1 Relerence Memarandutn tiam 0, ACG dated February. 6, 2024, with the Sathe subject as above 2. In connection wilh the above reference, lanwaded i the Cyber Security Bulletin No, 331 antited, "Be Sate Online by Understanding the Risk of Stalkware™ Published by the PNP ACG in line with thelr cyber security awareness campaign, 3. For information and widest dissemimuition Ri ‘© D CASTIL UR Fi idier General ©. NBtie AD PROs Cony Furniatied Commana Group, O-Siaii 0 2 scam PeatSaale He Phikhpines NATIONAL POLICE COMMISSION, PHILIPPINE NATIONAL POLICE ANTLCYBERCRIME GROUP Camp Gen Rafeet T Crome Guero: City FOR O16 BIOM FROM D.acG SUBJECT © ACG Cyber Security Bulletin No. 334 DATE FebitUany 8, 2024 1. References. 3. PNP ACG-Cyber Security Bulletin with Reference No. ACG-CEB 020824334 and bo Antex A of NHO-PNP General Orders Number OPL-18-09 gated ‘Ontober 3, 2079 (Pursuant 19 NAPOLCOM Resolution No 2018-26 dated October 3. 2078), 2. If Connedton with the above releieoces, plese be informed that this Group is igsiiing Cyber Security Bulistin No 331 enttied, “Be Safe Online by Understanding the Risk of Staihenware~ 3 |n'this regard, respecttully request approval and signature ‘of the sat Cyber ‘Security Bulletin to all PNP Offices/Units, 4. For consideration, S HERNIA Paii¢s Malas ner el Copy Fumishes PTO TADICT Se feRepumc of the Phuspecite NATIONAL POLICE COMMISSION PHILIPPINE NATIONAL POLICE ANTI-CYBERCRIME GROUP Samp FeSan Rattaa Reference Number ACG-CSB 02082433) ‘Be Safe Online by Understanding the Risk of Stalkerware ‘The folowing information was obiaited from difeterit cyber secunty sources tor bolification 10 all partes concemed pursuant to. the mandate of the Philmpme National Police Anti-Cybercrime Group (PNP AGG) and classified as ‘Restrigiad” pursuant to the PNP Regulanion 200-012 on Document Seourity and Impac! Rating as ‘high based on PNP Information Cammiuncalicn Tochnolegy (ICT), Security Manual x 2010.01 22 ands p 129, SUMMARY Stalerware 15.3 type of spyware’ thats Specifically designed to track and moniter 2n individual's activities withort their knowledge of covmeni It ts typically associated wath controlling, abusive, or coercive behavior in personal telationships The use of ‘stalkehware raises seniclis athical legal, and privacy concerns: in 2027 Kaspetsky detected alfectod users in 176 countries and it continues to be-agicbal orablem ‘Stalkerware refers ta tnois such as applications ani devices that allow snotnmr arson to secretly maniioy the phone aetvity of others. can monitor almost everything Being done on ihe devices, inching taking photos and videos websites baing vised Messages thal ste sent and received, the vail history, and fncation Stalksiware can alow someone to turn-on the webcam oF mictophane. take Screenshots, see activity on {hitt-pany apps. and yntercent. forward. or record phone calls Stalkerware oten expioits Secutty vulnerabdiies 10 Jain Uniauthotized acess tt Memeo’ device and dale This can lead to unintended conwenuences, suet as ideritity theft oF exposure-to other cyber threats Somenines, staikervore exmis ina legal grey ares in a way that an-app might be designed for monitoring children's behavior. but can also be used by an abuser to spy on thet victims. It typically poses as hustworthy parental controlar anti-thell apps, out in actuality, it iefar different. This is especially tue when it installs eel! on smariphones Sowertly and deesn't notity the target of the tracking Most ol the stalkerwate works in the background: mating tat most victinis will be unaware that their every step and action i& being manitarad_H can be instatied on = Hewice in several ways: including phishing emalls, feke apn downloads. oF physical access to the davice. Comparit to Android devices, (Phones are tess likely to have stathenware toale because the IPhone Operating System (OS) js n clased system. On “jaibroken ‘Phones, offenders cart get around this restriction, bul they still need physical access to