LightSpy Returns: Renewed Espionage Campaign Targets Southern Asia, Possibly India

This report describes the resurgence of LightSpy (F_Warehouse), an advanced, modular iOS espionage implant targeting individuals in Southern Asia (likely political targets). It details the infection vector (compromised news sites), loader/core/plugin architecture, extensive spying capabilities (file exfiltration, audio recording, keychain access, camera, browser history, remote shell), command-and-control infrastructure (including IP 103.27.109.217 and operator panel), multiple IoCs (file hashes, URLs), and provides detection YARA rules and mitigation recommendations such as enabling Lockdown Mode and following mobile security best practices.