Chinese-developed LightSpy spyware found operating in over 13 nations

Arctic Wolf Networks reported that the Chinese-origin spyware known as LightSpy has evolved into a full-scale surveillance product now active in more than 13 countries. The software enables purchasers to extract detailed location information, record sound and video, capture screen activity and remotely erase data on targeted devices. Its infrastructure features multiple pricing levels, a billing platform and a demonstration environment, suggesting a commercial sales model.

The firm linked the tool to actors associated with Chinese nation-states and is discussing the matter with the Department of Homeland Security while planning to share evidence with the FBI. A trace of a Chinese operator was uncovered when the individual used the billing system to order fried chicken, inadvertently exposing a real name and office address. Customers reportedly include Chinese enterprises, government bodies, military units and educational institutions, with servers spread across China, Europe and Africa.