Advancing UK Aerospace, Defence, Security & Space Solutions Worldwide
  • Home
  • /
  • Security
  • /
  • NCSC and partners share guidance for those at high risk of digital surveillance

Security

NCSC and partners share guidance for those at high risk of digital surveillance

In new advisories, the National Cyber Security Centre (NCSC) – a part of GCHQ – and agencies in Australia, Canada, Germany, New Zealand and the US, have revealed details about how malicious cyber actors are using two forms of spyware to target individuals in Uyghur, Tibetan and Taiwanese communities as well as civil society groups.

Image by Titima Ongkantong / copyright Shutterstock

The malicious software – dubbed MOONSHINE and BADBAZAAR – hide malicious functions inside otherwise legitimate apps in a technique known as ‘trojanising’.

Once installed, the apps have been observed variously accessing functions including microphones, cameras, messages, photos, and location data, including real-time tracking, without the user being aware.

Advertisement
DSEI 2025

The advisories warn that the apps specifically target individuals internationally who are connected to topics that are considered by the Chinese state to pose a threat to its stability, with some designed to appeal directly to victims or imitate popular apps.

Examples include ‘Tibet One’ and Audio Quran apps that have supported targets’ native languages and were promoted in online forums frequented by intended users, as well as some apps imitating the likes of legitimate brands such as Whatsapp and Skype.  

Individuals at risk of being targeted by these spyware apps are strongly encouraged to follow new advice to help protect their devices and data.

Both advisories have been developed in collaboration with industry experts from the NCSC’s Cyber League.   

NCSC Director of Operations Paul Chichester said: "With our international and industry partners, we are committed to helping equip individuals at risk of online surveillance with the information they need to counter spyware threats."

Advertisement
DSEI 2025

"We are seeing a rise in digital threats designed to silence, monitor, and intimidate communities across borders, and the use of these two forms of spyware is clearly unacceptable."

"The NCSC urges people at higher risk to exercise heightened vigilance and follow our practical advice outlined in the advisory to help keep their devices and data safe."

A second advisory contains technical analysis of the spyware as well as steps that app store operators, developers and social media companies can take to keep their users safe.

The individuals most at risk include anyone connected to: Taiwanese independence, Tibetan rights, Uyghur Muslims and other ethnic minorities in or from China’s Xinjiang Uyghur Autonomous Region, democracy advocacy, including Hong Kong and the Falun Gong spiritual movement.

Advertisement
Cranfield University
UK pioneering global move away from passwords

Security

UK pioneering global move away from passwords

8 May 2025

The UK government is set to roll out passkey technology for its digital services later this year as an alternative to the current SMS-based verification system, offering a more secure and cost-effective solution that could save several million pounds annually.

Smiths Detection to deliver checkpoint screening at DXB

Aerospace Security

Smiths Detection to deliver checkpoint screening at DXB

8 May 2025

Smiths Detection has been awarded a contract by Dubai Aviation Engineering Projects (DAEP) to deliver state-of-the-art checkpoint screening solutions across all terminals at Dubai International Airport (DXB).

IFS launches Nexus Black

Aerospace Security

IFS launches Nexus Black

8 May 2025

IFS has launched Nexus Black, a strategic innovation programme to expedite high-impact AI adoption for industrial organisations.

Gama Aviation to utilise ELMS Aviation

Aerospace Security

Gama Aviation to utilise ELMS Aviation's employee management solution

7 May 2025

Gama Aviation has signed a new long-term agreement with ELMS Aviation, utilising the company’s powerful personnel competence and compliance platform to support the global expansion of the business.

Advertisement
DSEI 2025
Delta Fire scoops double 2025 King’s Award win

Security

Delta Fire scoops double 2025 King’s Award win

6 May 2025

A Norwich-based family business, Delta Fire, has been awarded two prestigious King’s Awards for Enterprise, in what is believed to be a first for Norfolk.

Smiths Detection strengthens border security in Trinidad & Tobago

Security

Smiths Detection strengthens border security in Trinidad & Tobago

2 May 2025

Smiths Detection has successfully delivered and installed four state-of-the-art HCVM XL mobile scanners to the Customs and Excise Division (CED) of Trinidad & Tobago.

Advertisement
ODU RT