NCSC Warns Uyghur, Tibetan, Taiwanese Communities of Spyware Threats

The UK's National Cyber Security Centre (NCSC) and international allies have issued a warning about two spyware variants, MOONSHINE and BADBAZAAR, that target Uyghur, Tibetan, and Taiwanese communities. These malicious apps, which disguise themselves within legitimate software, can access device microphones, cameras, and personal data without users' knowledge. The NCSC highlighted that individuals involved in movements deemed threatening to the Chinese state, such as advocates for Taiwan's independence or Tibetan rights, are particularly at risk. The advisory recommends using trusted app stores and regularly reviewing app permissions to enhance security. Moreover, apps like 'Tibet One' and 'Audio Quran' have been identified as tools for these attacks, often promoted in forums frequented by the targeted groups. The NCSC's guidance has been supported by cybersecurity agencies from multiple countries, emphasizing the need for vigilance against these digital threats.