UK cybersecurity agency reports China-backed spyware targets Uyghurs, Tibetans, and Taiwanese via fake apps, enabling secret access to user data and real-time surveillance.
The National Cyber Security Centre (NCSC) of the UK and various international organizations focused on cybersecurity and intelligence announced on April 10, 2025 that hackers are using two types of previously recognized spyware to monitor Uyghur, Tibetan, and Taiwanese individuals as well as civil society groups.
The malicious software known as MOONSHINE and BADBAZAAR can infiltrate the microphones and cameras of devices, collecting messages, photos, and location data, which permits users to be surveilled in real time without their awareness.
Spyware-infected applications are being leveraged to target individuals and groups worldwide associated with activities deemed a threat to China’s stability by the state, according to a press release from the NCSC highlighted.
Those believed to be at the highest risk of being targeted include individuals connected to Uyghurs, Taiwan’s independence movement and organizations advocating for Tibetan rights. Additionally, other ethnic minorities from or within Uyghur Autonomous Region, democracy advocates, and members of the Falun Gong are also thought to be in danger.
Certain applications imitate well-known platforms such as WhatsApp and Skype, while others are established as standalone applications to draw interest from potential victims within the targeted communities. Two independent applications, Audio Quran and Tibet One are accessible in users’ native languages and promoted in online spaces frequented by members of those communities.
For instance, hackers promoted the Tibet One app in Telegram groups focused on the region and in relevant threads on Reddit, as stated by the NCSC. Tibet One is an iOS application that was added to the Apple App Store in December 2021 but has since been taken down. The NCSC reported that “malicious actors” designed the app as a means to infect users’ devices with BADBAZAAR spyware.
The Audio Quran app employs MOONSHINE spyware to surveil Uyghurs, according to the NCSC, building trust by incorporating the Uyghur language in its file name and presenting itself as containing content related to the Quran, Islam’s primary religious text.
Taiwan has never been governed by the People’s Republic of China; however, Beijing has repeatedly expressed its intention to unify the island with the mainland and has not ruled out the use of military force to achieve this goal.
For nearly a decade, reports have documented that the Chinese government has detained large numbers of Uyghurs in what it calls “reeducation camps,” prompting widespread international concern and condemnation.
Be First to Comment