Chinese Spyware Tool LightSpy Detected in 13 Countries

Chinese Spyware Tool LightSpy Detected in 13 Countries

First seen 6 Aug 2026, 07:21 UTC StraitstimesUnn.Ua 96% similarity 72.5

Article Content

Browse articles
ThreatCluster

Arctic Wolf Networks Inc reported on August 5, 2026, that a Chinese spyware tool named LightSpy is operational in over 13 countries. This platform allows users to purchase capabilities for stealing personal information, including location data, recordings, and more. It features a structured pricing model and a demo environment for potential buyers. The tool is linked to Chinese state actors and has been found on 117 servers, affecting various sectors including enterprises and government agencies. LightSpy can also wipe personal devices completely. The company is collaborating with the Department of Homeland Security and the FBI to address the threat. The spyware's infrastructure has expanded from China to other regions, including Europe and Africa.

Key Points: • LightSpy spyware tool linked to Chinese state actors detected in 13 countries. • The tool allows extensive surveillance, including location tracking and device wiping. • Arctic Wolf is working with U.S. authorities to mitigate the threat posed by LightSpy.

ThreatCluster AI How this analysis works

Timeline

2026-08-05
Arctic Wolf reports on LightSpy spyware
The cybersecurity firm identified LightSpy, a Chinese spyware tool, operational in over 13 countries with capabilities for extensive surveillance.
Straitstimes
Date unknown
LightSpy's infrastructure expands
LightSpy's operational infrastructure has grown from mainland China to various countries, now including 117 servers.
Straitstimes
Date unknown
Collaboration with U.S. authorities
Arctic Wolf is in discussions with the Department of Homeland Security and FBI regarding the LightSpy threat.
Straitstimes

Community

Browse all →

Tracked Entities in This Story