Hey there, tech enthusiasts! Today, let’s dive into a fascinating and somewhat alarming story about Chinese authorities and their new hacking tool.

Security experts have uncovered a malware called Massistant, developed by Chinese tech giant Xiamen Meiya Pico, which can extract a wide array of data from seized phones. This includes messages, images, location history, and even audio recordings.

The tool requires physical access to a device, typically when it’s unlocked, and works alongside a hardware tower connected to a computer. It’s mainly used on Android devices, though there might be an iOS version in development, as suggested by their website.

Authorities can deploy Massistant without sophisticated hacking methods, simply by having the phone handed over. Once installed, the malware leaves traces on the device, meaning users might be able to detect and delete it—though by then, the data has already been compromised.

The use of this tool is broadly suspected across Chinese police agencies, especially at border crossings, where devices can be confiscated without warrants. Experts warn travelers to stay vigilant, as their devices might be hacked without their knowledge.

The good news is that the malware appears as an app on the phone, providing a chance for users to identify and remove it. Still, the damage is done during installation, as authorities can already access the device’s data.

Xiamen Meiya Pico has a significant share in China’s digital forensics market and was even sanctioned by the U.S. government in 2021 for supplying technology to the Chinese government. This malware is seen as part of a broad ecosystem of surveillance tools used in China, which includes at least 15 different families of malware.