China-linked LightSpy spyware caught targeting victims in 13 countries, including the US

Arctic Wolf researchers report that LightSpy — a Chinese-linked modular spyware first identified in 2018 — has evolved into a commercial spyware platform used to target victims in over a dozen countries, including NATO members and the United States. The platform can exfiltrate location data, chat messages, screen recordings, and stored passwords, remotely wipe or brick devices, and has been observed compromising routers to broaden access; researchers identified at least 117 servers and linked activity to a Chinese contractor.