EXPLORINEER
en

Archive — US — techcrunch

China-linked LightSpy spyware caught targeting victims in 13 countries,including the US

Security researchers report that LightSpy, a spyware linked to China, is targeting victims across 13 countries, including the US. Originally discovered in 2018, it has evolved into a commercial platform capable of stealing sensitive data and remotely disabling devices. The spyware, previously linked to state-backed hackers, is now available for enterprise and government use, raising alarms over its proliferation beyond state actors.

Key points

  • LightSpy spyware has expanded its operations to 13 countries, including the US and multiple European nations.
  • Originally identified in 2018, it has developed new features for extensive data theft and device control.
  • Operated by a single actor supplying services to governments and businesses, it demonstrates an evolution from state-sponsored tools to privatized espionage.
  • The spyware's capabilities include stealing sensitive data (location, messages, passwords) and remotely wiping devices.
  • LightSpy has also been found infecting routers, potentially giving hackers broader access to networks, including those of NATO member countries.
  • The tracking of an order made by an operator via the spyware's admin panel linked it back to a Chinese contractor.

Why it matters

  • This incident reflects a growing trend of commercial spyware availability, where private actors offer services previously dominated by state-sponsored entities.
  • As cybersecurity threats evolve, the growing use of spyware in both governmental and commercial contexts highlights the importance of robust cybersecurity measures.
  • The rise of modular spyware platforms aligns with 2025 IT trends focused on cyber resilience and the need for organizations to secure networks against advanced threats.

The emergence of LightSpy highlights an alarming shift in cybersecurity, where state-aligned spyware evolves into commercial products, underscoring the critical need for enhanced vigilance against evolving cyber threats globally.