maia blog

Now replaced by CapCut for most, KineMaster used to be the kinda shitty video editing app of choice on mobile devices.

Almost two years ago now, in February 2024, a source reached out to me with data on a network of three stalkerware services: SpyX, MSafely and SpyPhone.

in early 2024, i was spending some time trying to find IDF field infrastructure on Zoomeye, particularly GNSS base stations (used to correct for errors in GPS tracker data) and similar (semi-)permanent field gear. as i was doing this, i started seeing more

Note: This piece will keep receiving updates as we receive more data. fbi.txt Note: This is data from 2021 and may be partially outdated.

Here's the deal: Adrian Dittmann is not Elon Musk, and we have concrete evidence.

the end of the year is fast approaching and everyone is busy preparing for the holidays, but just like many other bloggers i am using my time for a much more important endeavor: writing a year-in-review post where i list off 10 things i quite liked in 202…

one: doom All my siblings wanna swim but it's infested with great whites Tell me if shit changed since Leelah and Blake died Tell me if my best friend's about to be next in line Tell me that I'm brave motherfucker, do you wanna die?

people frequently reach out to me with companies to look into. usually it takes me about 10 minutes before i move on for one reason or another—it's not interesting for a story or has good security, for example. i didnt expect anything different when an ac…

yoooo maia!

update: the data this reporting is based on is now available via DDoSecrets for secondary reporting, journalists interested in quotes or reproducing my research can reach out to me most stalkerware reporting focuses on private use by abusers, stalkers or…

anyone who has spent any amount of time on twitter probably knows of Dexerto, the famously low-quality "news site" primarily reporting on entertainment, influencer and video game news. they're wildly successful on social media, with almost 900,000 followe…

this is a follow up story on the massive pcTattletale hack. when you search for "pcTattletale" in US federal court systems, just one case comes up: US v.

Bryan Fleming comes off as the average marketing guru from michigan, even if he's oddly obsessed with the rather specific field of online lawncare marketing. but he has a side venture: for over two decades now, he's been a player in the stalkerware indust…

y'know, after the TruthSpy saga earlier this year i shouldn't be surprised anymore when stalkerware companies get hacked the same way two or three times, but i didnt expect to have to already write a followup to the third article in this series. but here…

having just finished a full draft of the latest stalkerware article, i decided to wind down in the most "maia™" way possible and, just like when i discovered the no-fly list, i started going through random jenkins servers on zoomeye to pass the time. there

if you want to know if your phone is/was infected with TheTruthSpy's stalkerware you can use the lookup tool provided by TechCrunch, which has been updated to include all data from this leak as well. to learn about what stalkerware is and why it is bad re…

if you've ever used tiktok before and had a somewhat queer and weird fyp you've probably seen one of basedretardgang's (their username on tiktok is now basedredactedgang) tiktoks before, videos of asian girls (mostly kpop stars and chinese models) posing…

after taking a two month long hiatus (for mental health reasons, nothing to get into deeper here), i decided catch up again with some sources a few weeks ago. one of them started bringing up some massive hacks they had been doing in russia, making it clear

the intro to this series and the concept of stalkerware can be found here we continue our series on stalkerware with a write-up and batch of data sent to me by a source last night. this time it is the brazilian ownspy (aka webdetective and saferspy, by mo…

a few days ago an anonymous (the adjective, not the hacking collective) group of researchers reached out to me regarding a write-up they made i might be interested in covering. interestingly enough their write-up about how twitch competitor kick.com isn't…

earlier this year, the popular far right fediverse instance poast was hacked leaking user profiles with emails, posts and DMs. today i was sent a special little treat, a singular html file containing all the poa.st and bae.st profiles with linkedin profil…

about a week ago now i got tagged in a random discord server im in with a screenshot of a romanian government website, it had been defaced and now read "this website has been owned!

the intro to this series and the concept of stalkerware can be found here this is a rather technical deep dive into how i hacked SpyHide (sometimes referred to by the shortening CRT, their .com domain) and a bit of my own analysis, for a less technical and

the intro to this series and the concept of stalkerware can be found here a few days ago, while i was starting work on this very series, polish stalkerware company LetMeSpy (LMS) got completely pwned and had their databases dumped. the link to the file (j…

alright, it's time to embark on a new mission, over the course of the next few blog posts/weeks/months we are going to try and slowly ruin the stalkerware industry. some of the most vile, somehow not illegal, types of businesses to exist. but to do this i…

this blog post was originally a tumblr post, inline links are sources so today the following post appeared on my tumblr dash, reminding me of a bit of research i did a while ago. https://www.tumblr.com/tchaikovskaya/714797621937618944 as you can see there…

my public image is a little misleading. always silly, always cheerful, a source of fun and positivity. im glad i get to appear like that, motivate other people and bringing joy to many. but it really doesn't represent at all who i am on the inside, even t…

yesterday evening an anonymous 4chan user dumped a leak on the /g/ technology board, claiming to have completely owned risk visualization company optimeyes: > be cyber security risk assessment company > focus on intellectual property theft > dont secure ur

hey hey hey, so as many of you might know i got suspended from twitter the other day, however we are already soooo back, and i have a new account now at @maiaarson, that's all, thank you. i have since been suspended again from twitter, i have given up on…

CLARIFICATION: i, maia, am not the source of this email leak, merely a publisher, since i feel that this should be more widely available than just to selected journalists a few days after my original public release of 2600 pages of emails showing the mass…

Emails.pdf (PDF, 2603 pages, 62MB), available as a torrent (magnet) this file ("Deutsch emails") contains the complete source of email threads for the 2023-03-08 Mother Jones story “Inside the Secret Working Group That Helped Push Anti-Trans Laws Across t…

note: this is a slightly more technical* and comedic write up of the story covered by my friends over at dailydot, which you can read here i say slightly since there isnt a whole lot of complicated technical stuff going on here in the first place step 1:…

In February I was contacted by convincing from webcage, asking whether I'd like to have a look at some malware that ended up on the website of webcage member nebita.