Chinese provincial security teams used spyware to collect texts, audio recordings

Lookout researchers and media reporting detail EagleMsgSpy, a powerful Android surveillanceware used by multiple Chinese public security bureaus since at least 2017. The tool exfiltrates extensive sensitive data (third-party chats including encrypted apps, screenshots, audio recordings, contacts, SMS, call logs, location and network activity), stages and compresses stolen data for exfiltration, and offers administrative features such as real-time screenshots, photo/audio capture, and call/SMS blocking; installation appears to require physical access (USB or QR), newer versions use stronger obfuscation, and links exist to other surveillance tools and possible developer ties to larger Chinese security vendors.