Lookout Identifies Chinese Spyware EagleMsgSpy

Researchers at Lookout have identified a previously undocumented Android spyware named 'EagleMsgSpy', believed to be utilized by Chinese law enforcement agencies since at least 2017. This surveillance tool, developed by Wuhan Chinasoft Token Information Technology Co., Ltd., collects extensive data, including texts, audio recordings, and location information from various messaging apps like WhatsApp and Telegram. Lookout's findings reveal that the malware is likely installed manually during physical access to devices, raising concerns about privacy and domestic surveillance practices in China. The spyware has been continuously updated, indicating ongoing development and enhancement of its capabilities. Researchers suggest that EagleMsgSpy represents a merging of governmental and malware operations, akin to the NSO Group in Israel, and highlights a broader trend of surveillance tools being contracted by law enforcement. While the precise extent of its use remains unclear, it poses a significant risk to individuals, particularly travelers in the region.