Chinese-affiliated group Poison Carp conducted a mobile surveillance campaign against Uyghurs in China and abroad using Android exploit and malware kit Moonshine. This is the second time Moonshine has reportedly been used; the first was in 2019 to surveil Tibetan activists.