Technical Analysis & Behavior
Ppapp (family: EasyPhoneTrack) is a verified Android stalkerware and covert surveillance application tracked by the Coalition Against Stalkerware and Echap. Also distributed under aliases: EasyPhoneTrack, Ppapp. Associated disguised Android package IDs: com.spappm_mondow.alarm, com.monspap.alarm, com.snapchat.trmonap, com.snapch.monabcab. Signed with developer SHA1 certificate 4A3742E0C96AFB91... Linked command/marketing domain: spappmonitoring.com. Once sideloaded with Accessibility, Notification Listener, and Device Admin permissions, it hides its launcher icon and silently exfiltrates SMS messages, call logs, WhatsApp/Signal chats, real-time GPS coordinates, and microphone audio.