{"id":6630,"date":"2024-12-12T15:21:31","date_gmt":"2024-12-12T21:21:31","guid":{"rendered":"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/chinese-cops-using-android-spyware-track-mobile-devices"},"modified":"2024-12-12T15:21:31","modified_gmt":"2024-12-12T21:21:31","slug":"chinese-cops-caught-using-android-spyware-to-track-mobile-devices","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/12\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices\/","title":{"rendered":"Chinese Cops Caught Using Android Spyware to Track Mobile Devices"},"content":{"rendered":"
<\/a><\/div>\n
<\/div>\n

NEWS BRIEF<\/span><\/span><\/p>\n

A surveillance tool named EagleMeSpy, developed by a Chinese software company for legal use by the country’s public security bureaus, has been scraping the most sensitive data from targeted Android devices since at least 2017.<\/span><\/p>\n

Researchers at Lookout warn that the EagleMeSpy spyware has been under constant development, and while at the moment they have only seen evidence of an <\/span>Android version<\/a><\/span>, analysis of the tool’s infrastructure indicates a potential Apple iOS version is out there somewhere as well.<\/span><\/p>\n

Unlike other <\/span>commercial spyware<\/a><\/span> products, EagleMeSpy requires physical access to the targeted device to deploy the tool, the Lookout team found. The researchers reported they found no evidence of the <\/span>spyware <\/a><\/span>in Google Play or any other app stores, leading them to conclude Chinese law enforcement officials are the only ones initiating the <\/span>surveillance software<\/a><\/span> infection.<\/span><\/p>\n

“An installer component, which would presumably be operated by law enforcement officers who gained access to the unlocked device, is responsible for delivering a headless surveillance module that remains on the device and collects extensive sensitive data,” <\/span>the Lookout report<\/a><\/span> read.<\/span><\/p>\n

Once installed, EagleMsgSpy gathers everything it can, including chat and text messages, screen and audio recordings, call logs, contacts, location data, and network activity, Lookout said. Additional evidence shows the vendor behind the <\/span>spyware<\/a><\/span> has multiple clients.<\/span><\/p>\n

“Lookout researchers have observed an evolution in the sophistication of the use of obfuscation and storage of encrypted keys over time,” the report warned. “This indicates that this surveillanceware is an actively maintained product whose creators make continuous efforts to protect it from discovery and analysis.”<\/span><\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

NEWS BRIEF A surveillance tool named EagleMeSpy, developed by a<\/p>\n","protected":false},"author":12,"featured_media":6631,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-6630","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?fit=2560%2C1319&ssl=1",2560,1319,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?fit=300%2C155&ssl=1",300,155,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?fit=640%2C330&ssl=1",640,330,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?fit=640%2C330&ssl=1",640,330,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?fit=1536%2C791&ssl=1",1536,791,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?fit=2048%2C1055&ssl=1",2048,1055,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?fit=1024%2C528&ssl=1",1024,528,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?resize=825%2C575&ssl=1",825,575,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/12\/chinese-cops-caught-using-android-spyware-to-track-mobile-devices-scaled.jpg?fit=2560%2C1319&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/6630","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=6630"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/6630\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/6631"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=6630"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=6630"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=6630"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}