Trojanized Text Editor Software Used in Targeted Uyghur Spy Campaign

Summary: A Citizen Lab investigation has revealed that UyghurEditPP, an open-source text editor, has been weaponized to conduct cyber-espionage against members of the World Uyghur Congress (WUC). Attackers used spearphishing to distribute a trojanized version of the software, which allowed them access to sensitive information. This operation exemplifies a broader trend of targeting Uyghur communities through their cultural tools for digital repression.

Affected: World Uyghur Congress (WUC)

Keypoints :

• Attackers sent spearphishing emails to WUC members, prompting them to download a compromised version of UyghurEditPP.
• The malware mimicked the legitimate software while allowing covert surveillance and system manipulation once installed.
• This cyber operation reflects sophisticated, resource-intensive planning, highlighting a pattern of transnational repression against Uyghur activists.
• Citizen Lab suggests preventive measures, including verifying software sources and using endpoint protection, to mitigate similar threats.