'A fake account on Strava systematically exploited the popular fitness app to collect information about sensitive bases and secret sites, including a U.S. military base.'