A coalition of governments, including the UK and the US, has issued advisories warning about two China-linked spyware families, BadBazaar and Moonshine. These advisories highlight dozens of Android apps that appear legitimate but are designed to spy on users. The governments are advising the public to be cautious and avoid downloading these apps to prevent potential security breaches. The spyware families, BadBazaar and Moonshine, are sophisticated in their approach, often masquerading as trusted applications to bypass security measures and infiltrate users' devices. Once installed, they can collect a wide range of data, including sensitive personal information and communications. The targeted users can range from government officials to everyday consumers, making these spyware threats particularly concerning. The UK's National Cyber Security Centre (NCSC) and the US Cybersecurity and Infrastructure Security Agency (CISA) collaborated with international partners to compile a comprehensive list of these deceptive apps. The list includes a variety of apps, such as fake utilities, entertainment apps, and even educational tools, all of which can be found on both official and unofficial app stores. This collaboration is a significant step in fostering global cooperation to combat cyber threats. To protect themselves, users are advised to take several precautions. First, only download apps from official app stores like Google Play. Second, carefully review app permissions before installation, and avoid granting excessive access to personal data or device functions. Third, keep devices and apps updated to the latest versions to benefit from the latest security patches. The advisory also includes technical details and indicators of compromise (IoCs) for IT professionals and security researchers. These details can help identify and mitigate the presence of BadBazaar and Moonshine in organizational networks, further enhancing overall cybersecurity. The publication of these advisories underscores the growing concern over state-sponsored cyber espionage. As technology advances and more aspects of daily life become digitized, the potential for misuse and exploitation continues to grow. Governments and cybersecurity experts are working diligently to stay ahead of these threats and provide the public with the tools and information needed to stay safe. In response to these findings, major tech companies and app store providers are intensifying their efforts to detect and remove malicious apps. Google, for instance, has already taken steps to remove identified BadBazaar and Moonshine apps from its Play Store. However, the persistence of these threats requires ongoing vigilance from all stakeholders, including developers, app stores, and end-users. These advisories serve as a stark reminder of the importance of digital security in today's interconnected world. By staying informed and taking proactive measures, individuals and organizations can significantly reduce the risk of falling victim to these sophisticated spyware attacks.