Sophisticated LightSpy Spyware Campaign Discovered Targeting Victims Across 13 Nations

A highly sophisticated surveillance operation leveraging the updated **LightSpy** spyware framework has been detected targeting high-profile individuals across 13 nations, including targets in the United States and Western Europe. Security researchers report that the modular malware infects mobile devices via zero-day browser vulnerabilities. LightSpy grants operators near-total control over compromised smartphones, enabling silent audio recording, location tracking, keylogging, and extraction of encrypted messages from Signal, WhatsApp, and Telegram. The malware features self-deletion routines designed to erase forensic traces if analyst sandboxes are detected.

The discovery underscores the growing proliferation of commercial-grade mobile surveillance tooling. Mobile operating system vendors have dispatched emergency patches to address the underlying WebKit and kernel vulnerabilities exploited by LightSpy.