Six countries—the UK, US, Canada, New Zealand, Australia, and Germany—issued a joint warning about two malicious mobile applications, BADBAZAAR and MOONSHINE, used by Chinese security services to monitor individuals and groups deemed threats to the Chinese government. These include Taiwanese independence supporters, Tibetan activists, Uyghur Muslims, pro-democracy activists in Hong Kong, and Falun Gong practitioners.
The apps, developed by a Chengdu-based contractor reportedly linked to the Chinese Ministry of Public Security, secretly access user data including messages, photos, and location data. They mimic legitimate apps to deceive users and are spread through online forums frequented by the targeted groups.
The spyware's indiscriminate online distribution poses a risk to individuals beyond the intended targets.
The announcement advises four key steps to protect devices: