Spyware
EagleMsgSpy
According to Lookout, EagleMsgSpy is a lawful intercept surveillance tool developed by a Chinese software development company with use by public security bureaus in mainland China.
EagleMsgSpy is a Android spyware.
Background
Lookout characterizes EagleMsgSpy as a lawful-intercept surveillance product built by a Chinese software firm and deployed by public security bureaus across mainland China. Early samples suggest it has been in use since at least 2017, with development carrying on into late 2024. The tool harvests a broad range of victim data, including third-party chat messages, screen recordings and screenshots, audio recordings, call logs, contacts, SMS messages, location, and network activity. Based on overlapping infrastructure and artifacts recovered from exposed C2 directories, Lookout attributes EagleMsgSpy with high confidence to Wuhan Chinasoft Token Information Technology Co., Ltd.
Source: Malpedia (Fraunhofer FKIE).