LightSpy mAPT Mobile Payment System Attack

In July 2023 our colleagues from Lookout posteda report about two families of Spyware: DragonEgg and WyrmSpy, researchers attributed both families to the Chinese APT-41 group. We performed our own investigation and linked DragonEgg to sophisticated iOS implant LightSpy and its Android component which was reported by TrendMicro and Kasperskyin 2020. During our investigation, we obtained the Android implant Core and its 14 related plugins from 20 active servers, two of those plugins revealed new TTPs, that were …

android apt attack chinese chinese apt dragonegg implant investigation ios july july 2023 lookout mobile mobile payment own payment report researchers spyware system trendmicro