Global Cybersecurity Agencies Warn of Spyware Targeting Uyghur, Tibetan, and Taiwanese Communities

Summary: The UK’s National Cyber Security Centre, in collaboration with cybersecurity agencies from five countries, has issued a joint advisory on two spyware variants, BADBAZAAR and MOONSHINE, which are actively targeting Uyghur, Tibetan, and Taiwanese communities. This spyware campaign seeks to monitor and intimidate these groups perceived as threats by the Chinese state. The advisory emphasizes the risks these tools pose and offers guidance on how to protect against cyber intrusions.

Affected: Individuals from Uyghur, Tibetan, and Taiwanese communities, civil society organizations

Keypoints :

• Spyware variants BADBAZAAR and MOONSHINE are designed for covert surveillance, accessing sensitive data from targeted smartphones.
• Malicious apps disguised as trustworthy platforms, such as the Tibet One and Audio Quran apps, have been used to deploy these spyware tools.
• At-risk groups include supporters of Taiwan’s independence, Tibetan rights activists, Uyghur Muslims, advocates for democratic reform in China, and followers of the Falun Gong faith.
• The advisory includes recommendations for safe app usage and urges developers to enhance screening processes for malicious applications.