Advancing UK Aerospace, Defence, Security & Space Solutions Worldwide
  • Home
  • /
  • Security
  • /
  • NCSC and partners share guidance for those at high risk of digital surveillance

Security

NCSC and partners share guidance for those at high risk of digital surveillance

In new advisories, the National Cyber Security Centre (NCSC) – a part of GCHQ – and agencies in Australia, Canada, Germany, New Zealand and the US, have revealed details about how malicious cyber actors are using two forms of spyware to target individuals in Uyghur, Tibetan and Taiwanese communities as well as civil society groups.

Image by Titima Ongkantong / copyright Shutterstock

The malicious software – dubbed MOONSHINE and BADBAZAAR – hide malicious functions inside otherwise legitimate apps in a technique known as ‘trojanising’.

Once installed, the apps have been observed variously accessing functions including microphones, cameras, messages, photos, and location data, including real-time tracking, without the user being aware.

Advertisement
ODU RT

The advisories warn that the apps specifically target individuals internationally who are connected to topics that are considered by the Chinese state to pose a threat to its stability, with some designed to appeal directly to victims or imitate popular apps.

Examples include ‘Tibet One’ and Audio Quran apps that have supported targets’ native languages and were promoted in online forums frequented by intended users, as well as some apps imitating the likes of legitimate brands such as Whatsapp and Skype.  

Individuals at risk of being targeted by these spyware apps are strongly encouraged to follow new advice to help protect their devices and data.

Both advisories have been developed in collaboration with industry experts from the NCSC’s Cyber League.   

NCSC Director of Operations Paul Chichester said: "With our international and industry partners, we are committed to helping equip individuals at risk of online surveillance with the information they need to counter spyware threats."

Advertisement
DSEI 2025

"We are seeing a rise in digital threats designed to silence, monitor, and intimidate communities across borders, and the use of these two forms of spyware is clearly unacceptable."

"The NCSC urges people at higher risk to exercise heightened vigilance and follow our practical advice outlined in the advisory to help keep their devices and data safe."

A second advisory contains technical analysis of the spyware as well as steps that app store operators, developers and social media companies can take to keep their users safe.

The individuals most at risk include anyone connected to: Taiwanese independence, Tibetan rights, Uyghur Muslims and other ethnic minorities in or from China’s Xinjiang Uyghur Autonomous Region, democracy advocacy, including Hong Kong and the Falun Gong spiritual movement.

Advertisement
Cranfield University
Unifi secures Oxford Airport ground handling and security contracts

Aerospace Security

Unifi secures Oxford Airport ground handling and security contracts

17 April 2025

Unifi has secured its first business aviation ground handling contract and its third Fixed Base Operation/FBO security contract in the UK at London Oxford Airport, marking a major expansion of its services and a new milestone in its global growth.

M Group acquires Telent

Defence Security

M Group acquires Telent

16 April 2025

M Group has aquired Telent, a provider of operational technology and digital solutions for Critical National Infrastructure (CNI) across the UK and Ireland.

Met brings leader of fraud platform to justice 

Security

Met brings leader of fraud platform to justice 

15 April 2025

A massive worldwide operation led by the Met has seen a prolific cyber-criminal sent to prison for eight-and-a-half years.

XTI Aerospace subscale model of latest TriFan 600 unveiled at Avalon Airshow

Aerospace Security Events

XTI Aerospace subscale model of latest TriFan 600 unveiled at Avalon Airshow

14 April 2025

XTI Aerospace unveiled its tradeshow model of the TriFan 600 aircraft at last month's Avalon Airshow, the southern hemisphere's largest airshow, in Melbourne, Australia.

Advertisement
ODU RT
UK invests in quantum tech to tackle crime

Security

UK invests in quantum tech to tackle crime

14 April 2025

The UK government is investing £121 million in quantum technology to tackle crime, fraud and money laundering, while reinforcing its global leadership in the field and driving economic savings.

NCA investigation leads to Border Force seizing £1m at Heathrow

Aerospace Security

NCA investigation leads to Border Force seizing £1m at Heathrow

11 April 2025

As a result of a National Crime Agency (NCA) investigation, a man has been charged with money laundering after the seizure of £1 million in suitcases by the UK's Border Force at Heathrow Airport.

Advertisement
ODU RT