Technical Analysis & Behavior
TiSpy (family: KidsShield) is a verified Android stalkerware and covert surveillance application tracked by the Coalition Against Stalkerware and Echap. Also distributed under aliases: TiSpy, KidLogger, MonitorMinor, SelfSpy, SpyTrac, TelcadoAndroid, TiFamily, TracerSpy. Associated disguised Android package IDs: com.protect, com.aixlunro.uqfhkagb, com.bzbqbkya.hgozttiu, com.gzomoyig.qwgawtaz, com.android.inputmethod.latinmy, com.ntckdlhc.oifhnjwp. Signed with developer SHA1 certificate 0D025A887A154658... Linked command/marketing domain: backupsoft.eu. Once sideloaded with Accessibility, Notification Listener, and Device Admin permissions, it hides its launcher icon and silently exfiltrates SMS messages, call logs, WhatsApp/Signal chats, real-time GPS coordinates, and microphone audio.