Cyber experts at the National Cyber Security Centre (NCSC) have shared new advice to help protect individuals from the threat of digital surveillance posed by spyware apps.

The NCSC has partnered with international counterparts in Australia, Canada, Germany, New Zealand, and the US to reveal details about malicious cyber actors which use two forms of spyware to target individuals in Uyghur, Tibetan, and Taiwanese communities as well as civil society groups.

The malicious software – dubbed MOONSHINE and BADBAZAAR – hide malicious functions inside otherwise legitimate apps in a technique known as ‘trojanising’.

Once installed, the apps can access various functions including microphones, cameras, messages, photos, and location data, including real-time tracking, without the user being aware.

The apps have been specifically targeting individuals internationally who are connected to topics that are considered to pose a threat to the Chinese state’s stability, the advisory warns, with some designed to appeal directly to victims or imitate popular apps.

Examples include ‘Tibet One’ and Audio Quran apps that have supported targets’ native languages and were promoted in online forums frequented by intended users, as well as some apps imitating the likes of legitimate brands such as Whatsapp and Skype.

Individuals at risk of being targeted by these spyware apps are strongly encouraged to follow new advice to help protect their devices and data.

Recommended reading

• Google Changes AI Policy to Work on Weapons and Surveillance
• NCSC Issues Joint Warning About Chinese Cyber Threats
• NCSC Issues Advisory to Combat China-linked Cyber Threat

“With our international and industry partners, we are committed to helping equip individuals at risk of online surveillance with the information they need to counter spyware threats,” NCSC director of operations Paul Chichester said.

“We are seeing a rise in digital threats designed to silence, monitor, and intimidate communities across borders, and the use of these two forms of spyware is clearly unacceptable.

“The NCSC urges people at higher risk to exercise heightened vigilance and follow our practical advice outlined in the advisory to help keep their devices and data safe.”

A further advisory contains technical analysis of the spyware as well as steps for app store operators, developers, and social media companies to better protect their users.

The advisory warns that the individuals most at risk include: Taiwanese independence; Tibetan rights; Uyghur Muslims and other ethnic minorities in or from China’s Xinjiang Uyghur Autonomous Region; democracy advocacy, including Hong Kong, and the Falun Gong spiritual movement.