Share on LinkedInShare on LinkedIn

ARTICLE · 09 OCTOBER 2023

Ankura CTIX FLASH Update - October 6, 2023

Researchers have discovered connections between the Android spyware "DragonEgg" and the iOS surveillanceware tool "LightSpy". LightSpy is described as a "fully-featured modular surveillance tool...

United StatesTechnology

Malware Activity

New Details Discovered that Connect iOS Surveillanceware Tool "LightSpy" to Android Spyware Variants "DragonEgg" and "WyrmSpy"

UPDATE: Researchers have discovered connections between the Android spyware "DragonEgg" and the iOS surveillanceware tool "LightSpy". LightSpy is described as a "fully-featured modular surveillance tool set with a strong focus on victim private information exfiltration such as fine location data (including building floor number) and sound recording during VOIP calls." LightSpy is known to have the ability to exfiltrate payment data from WeChat Pay backend infrastructure as well as hook WeChat audio-related functions to record victims' VOIP conversations. Researchers reviewed the attack chain of LightSpy, which includes the use of a trojanized Telegram app that downloads a second-stage payload. Researchers then identified that the second stage is configured to download a third component called "TI" (also called "Core" in

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from