China-linked LightSpy spyware caught targeting victims in 13 countries, including the US

LightSpy is a modular spyware platform that allows whoever is controlling it to attack a multitude of different devices, including smartphones, Apple devices, Linux servers, and Windows PCs. By using exploits for each device, the spyware can steal large amounts of sensitive information from its targets, including precise location data, chat messages, screen recordings, and stored passwords. The researchers also said the code is capable of remotely wiping and destroying data on a compromised device.

The researchers said that LightSpy has now been identified infecting routers, which researchers say they had not seen before. By attacking routers, the hackers can gain visibility and access to any other device on the same network.

Some of the compromised routers are associated with NATO member countries, said Arctic Wolf. 

According to the company, LightSpy operates a network of at least 117 servers in several countries around the world.

The researchers said they were able to link the latest activity to a Chinese contractor after one of the spyware’s operators used the LightSpy administrator’s panel to place an order with Kentucky Fried Chicken using his real name and office address.