Sleuth Forensics

12 · Investigation

Mobile Phone Spyware Detection

Is someone else listening to your conversations? Professional forensic analysis to detect Pegasus, stalkerware, commercial spyware, and stealth monitoring tools on your iOS and Android devices.

Overview

Modern mobile spyware operates invisibly. It can silently record calls, read messages, track your location, activate cameras, and exfiltrate data — all without any visible indication on the device. Nation-state tools like Pegasus and Predator represent the most sophisticated end of this spectrum, but commercially available stalkerware poses an equally real threat to individuals and executives.

Our Mobile Phone Spyware Detection service uses forensic-grade tools and manual analysis techniques to determine whether your device has been compromised. We examine filesystem artefacts, network traffic patterns, installed profiles, running processes, and known indicators of compromise associated with both state-sponsored and commercial surveillance tools.

Warning Signs

  • Unexplained battery drain or device overheating
  • Unusual data consumption spikes
  • Someone appears to know details of your private conversations
  • Strange background noise during phone calls
  • Receiving unexpected or suspicious links via SMS or messaging apps
  • Device behaving erratically — camera or microphone activating on its own
  • Unfamiliar MDM or configuration profiles installed on the device

Who This Is For

  • C-suite executives, board members, and high-net-worth individuals
  • Journalists, activists, and individuals in sensitive roles
  • Individuals concerned about domestic surveillance or stalkerware
  • Legal professionals handling sensitive or high-profile cases
  • Organisations providing devices to executives operating in high-risk regions

What We Analyse

  • iOS and Android filesystem forensic acquisition and examination
  • Detection of Pegasus, Predator, Hermit, and other NSO/Cytrox-class tools
  • Identification of commercial stalkerware (FlexiSPY, mSpy, Cocospy, etc.)
  • MDM profile and enterprise certificate inspection
  • Network traffic analysis for covert data exfiltration
  • App permission auditing and sideloaded application detection
  • Jailbreak/root detection and exploit artefact analysis
  • SMS and messaging link forensics

What You Receive

  • Definitive assessment: compromised or clean
  • Detailed forensic report with evidence and indicators of compromise
  • Identification of the specific spyware tool (where possible)
  • Timeline of suspected surveillance activity
  • Remediation guidance and device hardening recommendations
  • Ongoing monitoring recommendations to prevent re-infection