China-Linked Hackers Continue Harassing Ethnic Groups With Spyware

UK NCSC and several international agencies warn of active China-linked mobile spyware campaigns using BadBazaar and Moonshine to target Uyghur, Tibetan, Taiwanese, Hong Kong pro-democracy activists and related communities. Malicious apps (e.g., an "Audio Quran.apt" package and a bogus "TibetOne" app), Telegram channels, Reddit and a dedicated website are being used to distribute the spyware; capabilities include location tracking, live audio/photo capture and file exfiltration. The advisory emphasizes risk of collateral infections and recommends downloading only from official app stores, keeping devices updated, avoiding jailbreaking, reviewing app permissions, and removing unneeded apps.