This article highlights the ongoing threat of spyware targeting Tibetan communities through spoofed mobile apps. It breaks down how tools like BADBAZAAR and MOONSHINE operate, which apps have been weaponized, and how users can spot and respond to potential infections. Practical tips and resources from trusted Tibetan cybersecurity networks are also included.