Skip to content
Chinese Spyware LightSpy Operates in 13 Countries, Cyber Firm Reports

Chinese Spyware LightSpy Operates in 13 Countries, Cyber Firm Reports

First seen 6 Aug 2026, 07:21 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 7, 2026 at 03:27 UTC
  • •LightSpy spyware tool operates in 13 countries, linked to Chinese state actors.
  • •The platform allows extensive data theft, including location and audio recordings.
  • •Arctic Wolf Networks is collaborating with U.S. authorities for further investigation.

A Chinese spyware tool named LightSpy has been identified as a significant surveillance technology operating in at least 13 countries. According to Arctic Wolf Networks, LightSpy allows users to steal sensitive personal information, including location data, audio recordings, and more. The platform features a commercial model with pricing tiers and a demo environment for potential buyers. It is linked to Chinese state actors and is currently being investigated by U.S. authorities, including the Department of Homeland Security and the FBI. LightSpy has been active for several years, with its infrastructure expanding to 117 servers worldwide, enabling data interception across Europe and Africa. The tool's capabilities pose risks for monitoring and suppressing opposition voices globally.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 46d ago How this analysis works

Timeline

2026-08-05
Arctic Wolf detects LightSpy spyware
Arctic Wolf Networks announces the detection of LightSpy, a spyware tool capable of extensive data theft and surveillance.
Straitstimes
2026-08-05
U.S. authorities notified
Arctic Wolf reports discussions with the Department of Homeland Security and plans to share findings with the FBI.
Straitstimes
Date unknown
LightSpy operator identified
A LightSpy operator was tracked down after leaving personal information in the code while ordering food online.
Theedgemalaysia

More articles in this cluster (16)

Following this threat?

Track LightSpy in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (27)

1 / 3