The KidsProtect spyware platform allows anyone to rebrand and resell Android surveillance malware under their own company name for just 0 a month.
A new Android spyware tool called KidsProtect is being sold openly on clear-web hacking forums with a dangerous twist: for a fee, anyone can buy it, slap their own name and logo on it, and start selling it as their own product. This white-label reseller model makes it significantly harder for law enforcement to shut down, since taking out one operator simply allows another to relaunch the same technology under fresh branding within hours.
KidsProtect presents itself as a parental monitoring app but its true purpose is covert surveillance. Once installed on a target device, it runs completely in the background under the disguised name “WiFi Service” or “WiFiService Installer.” Its accessibility service is labeled “WiFiService Assistant” and its notification listener “WiFiService Monitor,” making every visible component look like harmless system processes. The app’s package name, com.example.parentguard, uses a placeholder prefix from beginner coding tutorials, deliberately avoiding a traceable identity.
Certo analysts identified the tool being advertised on a clear-web hacking forum with marketing copy boasting “Built for Stability and Stealth” and offering a one-day free trial. The developer appears to be Greek-speaking based on forum profile details. The tool supports Android 7 through Android 16 and is sold on a subscription basis starting at $60, with a separate white-label package allowing complete rebranding and resale under the buyer’s own pricing structure.
The white-label model directly undermines past enforcement actions like the 2024 shutdown of PhoneSpector and Highster Mobile, making such victories far less meaningful when the underlying platform survives and enables new operators to spring up overnight. Android users should be vigilant about apps requesting accessibility service permissions under generic system-sounding names.
Source: Cyber Security News — New Spyware Platform Lets Buyers Rebrand and Resell Android Surveillan
