Stalkerware Detection: A Mixed Landscape in 2025
The Electronic Frontier Foundation (EFF) has long been a vigilant advocate against the rise of stalkerware—commercially available applications designed to be stealthily installed on another individual’s device, extracting sensitive data without their consent. In its ongoing mission, EFF has consistently urged developers of anti-virus software for Android devices to enhance their capabilities in detecting stalkerware and to explicitly inform users when such threats are identified.
In collaboration with AV Comparatives, a respected research organization, EFF has recently conducted updated assessments of the leading anti-virus products for Android, focusing specifically on their ability to identify prevalent stalkerware applications in 2025. The findings reveal a landscape that remains uneven in terms of detection efficacy.
Stalkerware detection is still a mixed bag. Among the tested products, Malwarebytes achieved a commendable 100% detection rate for all stalkerware samples examined. Other notable performers included ESET, Bitdefender, McAfee, and Kaspersky, each detecting nearly all but one of the stalkerware samples. This marks a significant improvement compared to the 2021 evaluations, which highlighted only one application, G Data, with a perfect detection score, while the next best performers hovered around 80-85% detection rates. In contrast, Google Play Protect and Trend Micro lagged behind, with detection rates of just 53% and 59%, respectively. The underwhelming performance of Google Play Protect is particularly concerning, as it serves as the default anti-virus solution on numerous Android devices. Alarmingly, some stalkerware applications have been designed to disable detection by Google Play Protect during installation.
There are fewer stalkerware products out there. The 2025 assessment revealed a reduction in the number of unique stalkerware applications, with only 17 distinct products tested compared to 20 in previous years. Many of these applications appear to be variations of a limited number of underlying technologies. While the exact reasons for this decline remain uncertain, speculation suggests that heightened regulatory scrutiny may play a role. Additionally, the growing popularity of affordable, Bluetooth-enabled tracking devices, such as Apple AirTags and Tiles, may be diverting users away from traditional stalkerware solutions.
These findings aim to empower survivors of domestic abuse and individuals concerned about stalkerware on their Android devices, enabling them to make informed decisions regarding their anti-virus applications. Furthermore, by highlighting the deficiencies in stalkerware detection, EFF hopes to rekindle interest among anti-virus companies in addressing this pressing issue.
For those interested in a comprehensive overview of the test results, the full report is available here (PDF).
