Antivirus vendors and non-profits including Avira, the EFF, and Kaspersky form the Coalition Against Stalkerware to fight secretly installed snooping apps
Context & Ripple Effects
The coalition formalizes work already underway at the EFF: Eva Galperin's Threat Lab advocacy for stalkerware victims earlier in 2019 supplied the victim-side expertise, while Avira and Kaspersky bring detection capability on the devices where these apps hide. It lands two weeks after Google's App Defense Alliance with ESET, Lookout, and Zimperium, showing antivirus firms organizing along two tracks — app-store intake with Google, and shared threat intelligence among themselves.
Why it matters: stalkerware sits in an awkward spot for security vendors — it is commercial software, often marketed for parental control or partner monitoring, so flagging it means confronting legitimate-looking businesses rather than anonymous malware crews.
First-order effects
- Vendors in the coalition can now classify and flag stalkerware as a coordinated category instead of case-by-case detections, directly affecting the commercial spyware vendors whose apps Avira and Kaspersky products will surface to users.
- The EFF gains an operational channel — vendor telemetry and removal tooling — beyond its awareness-raising role for affected people.
Second-order effects
- Non-coalition antivirus vendors face pressure to match stalkerware detection or explain why their products tolerate apps that peers now treat as malware, pushing category-wide classification norms.
- Commercial stalkerware developers must respond by rebranding, obfuscating their apps, or shifting distribution outside mainstream channels — a cat-and-mouse dynamic that raises their operating costs.
Third-order effects
- If the pattern holds, commercially sold surveillance software gets squeezed toward the treatment reserved for malware, forcing a policy question platforms and regulators have since picked up — visible in the 2024 multi-government statement on spyware signed by Google, Microsoft, Meta, and others.
- The coalition also models cross-industry security cooperation between rivals — including Kaspersky, which later wound down US operations under a sales ban — suggesting such alliances outlast any single member's fortunes.
The trend: Security vendors are shifting from detecting malicious code to policing malicious uses of legal software, building standing coalitions that prefigure today's government-level spyware crackdowns.