Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

CIRCL OSINT Feed

ThreatFox MISP Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Lookout Threat Lab has uncovered a mobile forensics application called Massistant, used by Chinese law enforcement to extract extensive data from mobile devices. Believed to be the successor of MFSocket, Massistant requires physical access to install and is not distributed through official app stores. It collects sensitive information including GPS data, SMS messages, images, audio, contacts, and phone services. The tool is associated with Xiamen Meiya Pico Information Co., Ltd., a Chinese technology company controlling a significant portion of China's digital forensics market. Massistant introduces new features like Accessibility Services to bypass device security prompts and support for additional messaging apps. The discovery raises concerns about data privacy for travelers to China, as law enforcement can potentially access and analyze confiscated devices without a warrant.

Massistant is a mobile forensic tool developed by Xiamen Meiya Pico Information Co., Ltd., a prominent Chinese digital forensics company. It is designed for use by Chinese law enforcement agencies to extract extensive data from mobile devices. Massistant is considered the successor to the earlier tool MFSocket and introduces enhanced capabilities such as leveraging Accessibility Services to bypass device security prompts, enabling data extraction without user consent or interaction. The tool requires physical access to the target device for installation and is not distributed via official app stores, indicating its use in controlled, law enforcement contexts rather than widespread malware campaigns. Massistant collects a broad range of sensitive data including GPS location history, SMS messages, images, audio recordings, contacts, and phone service information. It also supports data extraction from additional messaging applications beyond those targeted by its predecessor. The discovery of Massistant raises significant privacy concerns, particularly for travelers to China, as law enforcement can confiscate devices and extract data without a warrant or user knowledge. While it is not malware in the traditional sense, it functions as a forensic surveillance tool with capabilities that can circumvent standard mobile security protections. There are no known exploits in the wild beyond its intended forensic use, and it is not a remotely exploitable threat but rather a physical-access forensic tool.

MD5 of 93c5cd3a0bb04012927ccd29e505772492fcfbee

MD5 of 8659920f99a96c294c9857a761ce0729f3a8f2f7

MD5 of 895ad87f382de53f7323117b47150eaf0550cbf4

MD5 of c17e9325a6932ff8b725b18e4ddcb6dadab99457

MD5 of 215bd2972c5598787addad911915b9a04932d68d

MD5 of 256c357f884f33c032d2352ee6ff73fe94da83a8

SHA256 of c17e9325a6932ff8b725b18e4ddcb6dadab99457

SHA256 of 93c5cd3a0bb04012927ccd29e505772492fcfbee

SHA256 of 256c357f884f33c032d2352ee6ff73fe94da83a8

SHA256 of 215bd2972c5598787addad911915b9a04932d68d

SHA256 of 895ad87f382de53f7323117b47150eaf0550cbf4

SHA256 of 8659920f99a96c294c9857a761ce0729f3a8f2f7

Detailed information about Chinese Mobile Forensic Tooling Discovered. Get real-time updates, technical details, and mitigation strategies.

Title	Severity	Type	Source	Date

Threats Tagged 'law enforcement'

Filter Threats

Threats Tagged 'law enforcement'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility