Overview

• Spyware apps MOONSHINE and BADBAZAAR covertly access microphones, cameras, messages, and location data on mobile devices without user awareness.
• The spyware targets Uighur, Tibetan, and Taiwanese communities, along with other groups viewed as threats to China's regime stability.
• The apps use trojanising techniques, embedding within legitimate software, and often mimic popular apps like WhatsApp and Skype.
• International cybersecurity agencies, including the FBI, NSA, and UK's NCSC, have issued updated warnings urging users to avoid third-party app stores and review app permissions.
• Experts warn the spyware's indiscriminate spread poses risks to broader populations, emphasizing the need for vigilance and protective measures.