Spotify Connect Exploit - Spotiamb 0.2.1. - hijacks user accounts to play songs.

[smoore528]

This issue has been unresolved since 2015. Two years on, Spotify have still not fixed the exploit.

See old thread here:

https://community.spotify.com/t5/Desktop-Linux-Windows-Web-Player/Spotify-Connect-Exploit-Spotiamb-0...

If one of the good folks at Spotify cannot identify when a fix will be implemented, I'm going to go ahead and cancel my premium account. Because this is just poor service, and not one worth paying for.

I will advocate this line of action to everyone else, should a resolution not be found.

[Swanny]

Hey @smoore528, I do not believe the app is supported any longer, however I will follow up to find out if there is any further word on this.

[Swanny]

Hi @smoore528, Spotify is not the official developer of Spotiamb, so we are unable to advise on patches for security issues. The best course of action is to follow these steps if your account has been compromised: https://support.spotify.com/article/someone-has-gained-access-to-my-account/

Any further issues please let us know!

[jhunter84]

I followed all of the suggested steps and I still am getting hijacked daily by spotiamb 0.2.1. What can I do to prevent this?

[smoore528]

So, in other words, Spotify do not intend to implement security measures to safeguard against this hi-jack?

[Swanny]

Hey guys, if you're still having issues with Spotiamb appearing in your Connect list, even after following the KB linked above, I'd suggest contacting Spotify Support through this link: https://support.spotify.com/contact-spotify-support/