Avast said that it found over 19,300 Android apps exposing user data to the public due to a misconfiguration of the Firebase database. Firebase is a tool Android developers can use to store user data.

The spyware operation's exposed customer email addresses and passwords were shared with data breach notification service Have I Been Pwned.