{
  "id": 233428,
  "title": "China-linked LightSpy spyware caught targeting victims in 13 countries, including the US",
  "url": "https://urgent.news/2026/08/06/china-linked-lightspy-spyware-caught-targeting-victims-in-13",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-06T19:22:30.000Z",
  "source": {
    "name": "TechCrunch",
    "slug": "techcrunch",
    "url": "https://techcrunch.com/2026/08/06/china-linked-lightspy-spyware-caught-targeting-victims-in-13-countries-including-the-us/"
  },
  "original_language": "en",
  "account": "Security researchers have uncovered evidence of a Chinese-linked spyware, LightSpy, expanding its reach to target victims in over a dozen countries, including the United States. Originally discovered in 2018 and previously linked to Chinese state-backed hackers, LightSpy has evolved into a commercial spyware platform. The platform, run by a single threat actor, offers custom branding, billing, and demos to attract clients from governments, enterprises, and militaries.\n\nLightSpy is a modular spyware capable of attacking various devices, including smartphones, Apple devices, Linux servers, and Windows PCs. By exploiting each device, the spyware can steal sensitive information, such as precise location data, chat messages, screen recordings, and stored passwords. The researchers found that LightSpy has been identified infecting routers for the first time, enabling hackers to gain visibility and access to any device on the same network. Some compromised routers belong to NATO member countries.\n\nThe spyware operates a network of at least 117 servers in various countries. Researchers traced the latest activity to a Chinese contractor after observing an instance where the spyware's operator placed an order using his real name and office address on Kentucky Fried Chicken's website, placing the order through LightSpy's administrator panel.",
  "summary": "Researchers linked the latest malicious activity to a Chinese company, after one of the spyware's operators placed an order with KFC using their real name and office address.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}