Skip to content

Topic

Mercenary Spyware

Commercially developed, government-deployed surveillance implants used against small numbers of individually selected targets.

Current stories

securityConfirmed14 publishers

Zero-click Candiru attacks on Al Jazeera devices ran through an ad vendor Google had approved

Citizen Lab said Discover-Tech's ads delivered zero-click Candiru attacks to at least 45 Al Jazeera devices. Google and IAB Europe have delisted the vendor, but Citizen Lab cannot yet attribute the attacks to any party.

Perspective Coverage

14 publishers
Builder
Builder 22%
Operator
Operator 51%
Investor
Investor 27%

Reality

Evidence78
Adoption
Not scored
Hype gap+15
Incentives35
Confidence76
securityConfirmed4 publishers

Apple's spyware alerts reached 110 countries, and they land on people, not fleets

Apple's latest mercenary spyware notifications went to users in 110 countries. The response checklist is per-person, and a standard MDM baseline covers almost none of it.

Perspective Coverage

4 publishers
Builder
Builder 16%
Operator
Operator 79%
Investor
Investor 5%

Reality

Evidence60
Adoption
Not scored
Hype gap+10
Incentives40
Confidence65
productConfirmed3 publishers

Apple's spyware notices reach 110 countries, and Lockdown Mode becomes a baseline control

Apple told TechCrunch it warned selected users across 110 countries on Thursday. For any org with journalists, diplomats or executives on iOS, the hardened profile is no longer an edge case.

Perspective Coverage

3 publishers
Builder
Builder 12%
Operator
Operator 75%
Investor
Investor 13%

Reality

Evidence58
Adoption
Not scored
Hype gap+10
Incentives50
Confidence68
securityConfirmed7 publishers

Apple threat notifications led one of twelve Serbians to a forensics lab that confirmed Pegasus infection

SHARE Foundation, Citizen Lab and Amnesty confirmed three infections among at least 14 Serbian targets around the March local elections, and the Android half of the wave was installed by hand during police custody.

Perspective Coverage

7 publishers
Builder
Builder 20%
Operator
Operator 66%
Investor
Investor 14%

Reality

Evidence72
Adoption30
Hype gap+15
Incentives45
Confidence70
securityOne report1 publisher

Mercenary spyware targeting reached three Turkish ministers on hardened, encrypted phones

At least three Turkish cabinet ministers turned up in Apple's latest mercenary spyware notification batch. Ankara's remediation ran ahead of any identification of the tool, and it may have to stay that way.

Publishers:turkiyetoday.com

Reality

Evidence35
Adoption38
Hype gap+14
Incentives62
Confidence42
investOne report1 publisher

Apple moved its spyware warnings to the Lock Screen. Your incident alerts are still in email.

Thursday's round of Apple threat notifications reached targets in 110 countries, and the delivery change is the lesson: an alert sent to an inbox is one you have to hope someone opens.

Reality

Evidence33
Adoption44
Hype gap+18
Incentives62
Confidence40