_______________  ___          __      __  _________________________   ___ ___  
\__    ___/\   \/  /         /  \    /  \/  _  \__    ___/\_   ___ \ /   |   \ 
  |    |    \     /   ______ \   \/\/   /  /_\  \|    |   /    \  \//    ~    \
  |    |    /     \  /_____/  \        /    |    \    |   \     \___\    Y    /
  |____|   /___/\  \           \__/\  /\____|__  /____|    \______  /\___|_  / 
                 \_/                \/         \/                 \/       \/

Bug List

T32

Pretty much the cheapest and most common commercial bug on the market. Frequency is set by changing the surface mounted resisters on the board (marked R1, R2, and R3). May also appear in green, or with battery leads/antenna pre-soldered onto the board.

Manufacturer: Unknown

Country of Origin: China

Frequencies: 87.5/88.1/88.3/88.5/88.7/76.0 mHz

TZT Potentiometer Bug

One of the many Potentiometer adjusted bugs on the market, and mostly pretty standard. Comes with two different sets of through hole to power the bug, potentially for alternate systems of implanting the system.

Manufacturer: TZT ShengYang

Country of Origin: China

Frequencies: 88-115 Mhz

DH-Radio FM Mic. QS2016037

Another amazingly unremarkable potentiometer based FM bug. Nothing incredibly interesting to note.

Manufacturer: DH-Radio(?)

Country of Origin: China

Frequencies: 88-108 Mhz

Unknown WFM-Range Bug

This bug is a bit different than most of the other bugs using the wide FM range. Instead of using a potentiometer to set the frequency, two buttons found on the top of the unit do the job. Board is commonly re-sold under a variety of names and brands.

Analyst’s Note: There is an Israeli man who adds batteries & encapsulate to these and resells them. There is no way that he actually manufactures this, or any of the other equipment he sells.

Manufacturer: Unknown

Country of Origin: China

Frequencies: 76-110 Mhz

Mini_FM_MIC V1.2

While operationally the same as most of the other bugs on this list, this bug is actually slightly more clever. Using a separately sold USB to TTL dongle, the user can set the frequency using a computer. Also has better sound quality than most of the devices on this list, using a half decent LNA.

Analysts Note: I suspect that someone who actually has to use these for a living gave significant help to the manufacturer for this design. Setting the frequency over a computer is a feature you would really want if you had past issues keeping track of a lot of these.

Manufacturer: Unknown

Country of Origin: China

Frequencies: 76-108 Mhz

“2018 Model” Encapsulated Implant

This bug is a slightly more professional style system designed to be hidden inside of electronics. Its manufacturer is unknown, although they tend to go for more than other bugs on the market with a few dedicated sellers of the system. Possibly another product of the “Red White” tag Chinese manufacturer.

Manufacturer: Unknown

Country of Origin: China

Frequencies: 400-470 Mhz

Shrink-Wrapped Implant

Another implant style bug, similar to the “2018 Model.” Also comes in a version with two dupont pins as downleads instead of wires, or alternatively a set of fully removable leads. Frequency tags for this system are the same color & style as the “2032 Button” and are likely the same manufacturer. PCB colors may alternate between green and blue.

Manufacturer: Unknown “Red White Label”

Country of Origin: China

Frequencies: 400-470 Mhz

“2032 Button” Coin Cell Bug

This is a relatively small, rather professional bug. The PCB is fully encapsulated in some sort of epoxy, and the battery for the system slides underneath the PCB. Overall a relatively compact and effective package.

Analysts Note: This is likely one manufacturer that has made a small business segment producing higher quality bugs. All of their bugs work in the 400-470 Mhz range, which stands out among other Chinese manufacturers. Designs are similar to TinyTx’s work, may have been an OEM of their company or reverse engineered one of their bugs.

Manufacturer: Unknown “Red White Label”

Country of Origin: China

Frequencies: 400-470 Mhz

Red/Black Potentiometer Implant

Another potentiometer based design, although slightly more distinctive with a red cover around the potentiometer screw. Similar to other designs of the same type, this also has extra mounting points to parasitically attach to the power of other electronics.

Manufacturer: Unknown

Country of Origin: China

Frequencies: 88-115 Mhz

3KL

A bit of a chunky bug, this device of Polish origin uses a larger battery (likely a Ls14250, very unsure from images) to power it. While it is a potentiometer bug, it operates in the 400 Mhz range. Despite this, it is still a WFM bug.

Manufacturer: Detective Store Ltd

Country of Origin: Poland

Frequencies: 430-440 Mhz

2KL

Another Coil Cell style bug, although with some fun tricks. The system has an integrated neodymium for easier deployment. The design is independent from the 3KL, with no apparent way to change the frequency.

Manufacturer: Detective Store Ltd

Country of Origin: Poland

Frequencies: 430-440 Mhz

V1TX

This device is another standard coin cell bug, with little to no frills. Somewhat higher quality manufacturing than the Chinese equivalents, but not by much. Does use a decent microphone produced by KNOWLES.

Analyst’s Note: I have some serious skepticism about their use of the BJ-21590-000 microphone. It is a high quality microphone, which is known for its use in US bugging equipment. However, the BJ-21590-000 is a square microphone with a hole in the direct center. The microphone shown in their images shows a standard electret capsule. They could be using the MD6052USZ-1 microphone, but that has been out of manufacture for years. It is such a strange thing to lie about. TinyTxs has always been a sketchy manufacturer, don’t get me started on their phony 10,000 “prize.”

Manufacturer: TinyTxs/Mikhail Technologies inc

Country of Origin: Canada

Frequencies: 433-436 Mhz 2.5 Khz step

CTX2

Essentially a slimmer version of the V1TX, with effectively the same parts in a different form factor. Also operates off of the same coin cell system.

Manufacturer: TinyTxs/Mikhail Technologies inc

Country of Origin: Canada

Frequencies: 433-436 Mhz 2.5 Khz step

V3TX

Very similar specifications to the other bugs on this list. Instead of the standard coin cell, this uses a pair of 7.9mm button cells. This makes the bug smaller than the others, but also significantly wider.

Manufacturer: TinyTxs/Mikhail Technologies inc

Country of Origin: Canada

Frequencies: 433-436 Mhz 2.5 Khz step

USBTXV2

Similar to the others on this list, however this bug draws power from a USB A port. This gives it the standard 5v out from a computer, rather than the normal 2.7v from the other bugs, giving it a longer range.

Analysts Note: This design was likely made for integration with a USB cable, although I have nothing to prove that. TinyTxs is known to do custom work, I would not be surprised if they have created some custom cables using this housing in the past.

Manufacturer: TinyTxs/Mikhail Technologies inc

Country of Origin: Canada

Frequencies: 433-436 Mhz 2.5 Khz step

ZX303

Pretty much the starting point of modern cell service based bugs, the ZX303 is a tracker that was originally designed for keeping track of dementia patients and the elderly. That usecase was eventually supplanted by covert surveillance. This bug is essentially a small cell phone, the listener “calls in” to hear what is going on. The device has a nice quality mems microphone onboard. The system also offers live GPS tracking, local storage on a TF card, and can be remotely wiped by texting certain codes. Due to the age of this design, many countries have stopped supporting the GSM frequencies that this device supports.

Analyst’s Note: There are a ton of these being resold in different housings and packages. If you see a GSM bug online with these features, you can take a guess that it is based off of this design or one of the later models.

Manufacturer: Topin

Country of Origin: China

Frequencies: GSM/GPRS 850/900/1800/1900 Mhz

ZX905

Effectively an improved version of the ZX303. Supports 4g, has two separate microphone inputs instead of one, and has a battery output that support certain high energy density cell phone batteries.

Manufacturer: Topin

Country of Origin: China

Frequencies: “4G LTE CAT-1+2G GSM or 4G LTE CAT-M+2G GSM” (whatever that means)

ZX908

This is essentially the ZX905 from Topin, but has the features onboard the PCB rather than requiring external antennas for everything. Depending on the configuration, this may come without an antenna for its 4g connection.

Manufacturer: Topin

Country of Origin: China

Frequencies: “4G: LTE-FDD:B1/B3/B5/B7/B8/B20, LTE-TDD:B34/B38/B39/B40/B41, 2G GSM Bands: B3 / B5 / B8”

A1R-KIT/PICO2

One of the few commercial wifi bugs on the market (although they advertise it as “OFDM”). Due to the fact that this is a sub-gigahertz wifi driven bug, the transmission between the user and the bug is encrypted. On top of that, the listener does not have to stand by over long periods of time, instead they just have to come get the files off of the bug occationally. Fairly sophisticated overall.

Analysts Note: I suspect that this has been derived from either an ESP32 kit or one of the Wifi pinhole camera kits. This is based on how it is packaged and the fact that it can theoretically support a camera.

Manufacturer: Endoacustica

Country of Origin: Italy

Frequencies: 424-447/850-910/925-964 Mhz