The founding father of a U.S.-based adware firm, whose surveillance merchandise allowed prospects to spy on the telephones and computer systems of unsuspecting victims, pleaded responsible to federal prices linked to his long-running operation.
pcTattletale founder Bryan Fleming entered a responsible plea in a San Diego federal court docket on Tuesday to prices of laptop hacking, the sale and promoting of surveillance software program for illegal makes use of, and conspiracy.
The plea follows a multi-year investigation by brokers with Homeland Safety Investigations (HSI), a unit inside U.S. Immigration and Customs Enforcement. HSI started investigating pcTattletale in mid-2021 as a part of a wider probe into the trade of consumer-grade surveillance software program, often known as “stalkerware.”
That is the primary profitable U.S. federal prosecution of a stalkerware operator in additional than a decade, following the 2014 indictment and subsequent responsible plea of the creator of a cellphone surveillance app known as StealthGenie. Fleming’s conviction might pave the best way for additional federal investigations and prosecutions in opposition to these working adware, but additionally those that merely promote and promote covert surveillance software program.
HSI stated that pcTattletale is one among a number of stalkerware web sites below investigation.
A spokesperson for ICE didn’t instantly remark when contacted by TechCrunch, nor did a consultant for the U.S. Legal professional’s Workplace for the Southern District of California, which introduced the fees in opposition to Fleming.
Fleming’s lawyer Marcus Bourassa didn’t reply to a request for remark Tuesday.
pcTattletale was a distant surveillance app that had been below Fleming’s management since a minimum of 2016. Stalkerware apps like pcTattletale enable bizarre shoppers to purchase software program able to monitoring individuals and their information with out their data, together with romantic companions and spouses, which is against the law in the USA and lots of different nations.
As soon as bodily planted on an individual’s cellphone or laptop (often with data of the sufferer’s passcode or login), the app would constantly add a replica of the sufferer’s info, together with messages, pictures and placement information, to pcTattletale’s servers and make the information accessible to whoever planted the adware.
Fleming shut down pcTattletale in 2024 following an information breach, which noticed a hacker deface the corporate’s web site and steal reams of knowledge from its servers, together with identifiable info belonging to its prospects and their victims. Greater than 138,000 prospects who had signed up to make use of pcTattletale had their breached info shared with information breach notification web site Have I Been Pwned.
On the time, Fleming advised TechCrunch that his firm was “out of enterprise and fully finished,” after deleting the contents of pcTattletale’s servers.
Regardless of the shutdown, federal brokers had been already far into their investigation of Fleming’s unlawful adware enterprise.
Feds search founder’s $1.2M residence
HSI started investigating pcTattletale in June 2021 after discovering over 100 stalkerware web sites providing surveillance merchandise, lots of which marketed lawful makes use of of the software program, similar to monitoring youngsters or workers.
pcTattletale stood out as a result of it was particularly promoting its adware for “surreptitiously spying on spouses and companions,” wrote HSI particular agent Nick Jones in the 2022 affidavit in assist of a search warrant for Fleming’s residence. The affidavit was unsealed in early December 2025 forward of Fleming’s anticipated plea listening to.
Crucially for investigators, Fleming was believed to be working pcTattletale from his residence in Bruce Township, Michigan, effectively inside attain of U.S. legislation enforcement — in contrast to many abroad stalkerware operators who aren’t.
Not like some stalkerware operators who defend their identities to keep away from authorized and reputational dangers from working with adware, Fleming was brazen in how he marketed pcTattletale. In movies posted on YouTube, Fleming may very well be seen at his residence selling pcTattletale as its creator and founder.
In keeping with the affidavit, HSI obtained a warrant in 2022 permitting the search of Fleming’s e-mail accounts. HSI stated the emails confirmed that Fleming “knowingly assisted prospects in search of to spy on nonconsenting, non-employee adults.”
Federal brokers later surveilled Fleming’s residence to verify it was actually him.
Jones additionally went undercover to gather proof, posing as an affiliate marketer below the guise of selling the adware in alternate for a lower of the proceeds. Because of this operation, Jones exchanged emails with Fleming, through which the pcTattletale founder supplied pictures meant for banner adverts that promoted the adware as a option to “catch a cheater,” which made it clear Fleming wished to market his product for unlawful functions.
By November 2022, HSI had obtained permission from a U.S. choose to look Fleming’s residence, which brokers raided quickly after, seizing an unknown variety of gadgets. Brokers additionally obtained data related to Fleming’s financial institution and his PayPal account, which had transactions totaling greater than $600,000 as of the top of 2021.
The search warrant was filed below seal amid issues that Fleming might destroy or tamper with proof. Fleming has since offered the home for $1.2 million, per public data.
Fleming’s conviction is a win for privateness advocates and campaigners who work to counter the proliferation of stalkerware and lift consciousness to its risks.
Eva Galperin, the director of cybersecurity on the Digital Frontier Basis and the co-founder of the Coalition In opposition to Stalkerware, who has investigated and fought stalkerware for years, commented on Fleming’s responsible plea when reached by TechCrunch.
“Probably the most putting features of this case is the extent to which stalkware corporations like pcTattletale function out within the open,” stated Galperin. “It is because the individuals behind these corporations so hardly ever face penalties for promoting instruments that they themselves say are explicitly for monitoring different individuals’s units with out their data or consent.”
“I hope that this case modifications the danger calculus for makers of stalkerware,” stated Galperin.
Fleming is predicted to be sentenced later this yr.
——
In the event you or somebody you recognize wants assist, the Nationwide Home Violence Hotline (1-800-799-7233) supplies 24/7 free, confidential assist to victims of home abuse and violence. In case you are in an emergency state of affairs, name 911. The Coalition In opposition to Stalkerware has assets should you suppose your cellphone has been compromised by adware.
