Researchers Link DragonEgg Android Spyware to LightSpy iOS Surveillanceware

A link between Android spyware DragonEgg and iOS surveillance tool LightSpy has been found by Dutch mobile security firm ThreatFabric. Both developed in 2023, DragonEgg can gather sensitive information from Android devices and was linked to a Chinese group APT41. LightSpy was used to target Apple iPhone users in Hong Kong. The two share similarities in configuration, runtime structure and plugins, and communication format. They compromise devices through a trojanized Telegram app.