New EagleMsgSpy Android spyware used by Chinese police, researchers say

Lookout researchers uncovered EagleMsgSpy, a powerful Android surveillanceware active since at least 2017 and attributed to Wuhan Chinasoft Token Information Technology and likely operated by Chinese public security bureaus. The spyware, apparently installed manually on seized/unlocked devices, can exfiltrate chat messages, call logs, SMS, contacts, location data, screenshots, screen recordings, audio, browser data and files; researchers linked samples to the developer through code, encryption strings, admin panel screenshots and C2 domain/IP overlaps.