Chinese Cops Caught Using Android Spyware to Track Mobile Devices – Dark Reading

Law enforcement across mainland China have been using EagleMsgSpy surveillance tool to collect mobile device data since at least 2017, new research shows.
December 12, 2024
NEWS BRIEF
A surveillance tool named EagleMeSpy, developed by a Chinese software company for legal use by the country's public security bureaus, has been scraping the most sensitive data from targeted Android devices since at least 2017.
Researchers at Lookout warn that the EagleMeSpy spyware has been under constant development, and while at the moment they have only seen evidence of an Android version, analysis of the tool's infrastructure indicates a potential Apple iOS version is out there somewhere as well.
Unlike other commercial spyware products, EagleMeSpy requires physical access to the targeted device to deploy the tool, the Lookout team found. The researchers reported they found no evidence of the spyware in Google Play or any other app stores, leading them to conclude Chinese law enforcement officials are the only ones initiating the surveillance software infection.
"An installer component, which would presumably be operated by law enforcement officers who gained access to the unlocked device, is responsible for delivering a headless surveillance module that remains on the device and collects extensive sensitive data," the Lookout report read.
Once installed, EagleMsgSpy gathers everything it can, including chat and text messages, screen and audio recordings, call logs, contacts, location data, and network activity, Lookout said. Additional evidence shows the vendor behind the spyware has multiple clients.
"Lookout researchers have observed an evolution in the sophistication of the use of obfuscation and storage of encrypted keys over time," the report warned. "This indicates that this surveillanceware is an actively maintained product whose creators make continuous efforts to protect it from discovery and analysis."
Read more about:
Becky Bracken, Senior Editor, Dark Reading
Dark Reading
Becky Bracken is a veteran multimedia journalist covering cybersecurity for Dark Reading.
You May Also Like
The Current State of AI Adoption in Cybersecurity, Including its Opportunities
Cybersecurity Day: How to Automate Security Analytics with AI and ML
The Dirt on ROT Data
IDC Analyst Brief: Enhancing Incident Response with Automated Investigation Workflows
Managing Third-Party Risk Through Situational Awareness
2024 InformationWeek US IT Salary Report
The Current State of AI Adoption in Cybersecurity, Including its Opportunities
Cybersecurity Day: How to Automate Security Analytics with AI and ML
The Dirt on ROT Data
From security alert to action: Accelerating incident response with automated investigations
Enhancing Cybersecurity: The Critical Role Of Software Security Training
Enterprise Key Management Buyer’s Guide
Frost Radar: Cloud Security Posture Management, 2024
SecOps Checklist
Copyright © 2024. This website is owned and operated by Informa TechTarget, part of a global network that informs, influences and connects the world’s technology buyers and sellers. All copyright resides with them. Informa PLC’s registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. TechTarget, Inc.’s registered office is 275 Grove St. Newton, MA 02466.

source
This is a newsfeed from leading technology publications. No additional editorial review has been performed before posting.