A strain of French-language cyber espionage malware spotted by security researchers shows that the National Security Agency isn’t the only spook agency brewing custom bad things to steal sensitive and personal data.

The malware was tied to a spying exercise codenamed Operation Snowglobe, which also spawned a seemingly related remote access trojan codenamed EvilBunny. Implants associated with Snowglobe are more advanced than Babar itself, which Canadian spies discovered in November 2009. Babar’s feature set includes keystroke logging, clipboard logging, screenshot snapping and, more unusually, the possibility to log audio conversations held through Skype messenger.