It’s not just spyware scandals: EU is funding the industry that spies on Europeans

Millions of euros worth of EU subsidies and taxpayer money is fuelling the very market that leads to spying on journalists, activitists, politicians and people in the EU, and undermines our democracies. 

EUobserver

.. også analyse af forbundede virksomheds-netværk

Cobwebs Technologies, grundlagt i 2015 af tidligere IDF's special-styrker og efterretnings-enheder, fusionerede med Penlink i 2023/24.

Cobwebs' grundlægger og direktør, der nu leder Penlinks globale aktiviteter, og indirekte andel i #spyware -leverandøren Quadream.

.. tidligere Cobwebs-direktør investorer i Quadream, hvis #spyware blev brugt til at overvåge civilsamfundet, journalister og politiske opposition
https://citizenlab.ca/research/spyware-vendor-quadream-exploits-victims-customers/

Sweet QuaDreams: A First Look at Spyware Vendor QuaDream’s Exploits, Victims, and Customers - The Citizen Lab

At least five civil society victims of QuaDream’s spyware and exploits were identified in North America, Central Asia, Southeast Asia, Europe, and the Middle East. Victims include journalists, political opposition figures, and an NGO worker. We identify traces of a suspected iOS 14 zero-click exploit used to deploy QuaDream’s spyware.

The Citizen Lab

Security researchers oplyser, at de har identificeret en hack-for-hire group, der er rettet sig mod journalister, aktivister og embedsmænd i Mellemøsten og Nordafrika

..og installerede Android #spyware

.. en voksende tendens til, at regerings-organer outsourcer deres hacking-operationer til private hack-for-hire-virksomheder

..kommercielle virksomheder, der udvikler spyware og exploits, som politiet og efterretnings-tjenesterne bruger til at få adgang
https://techcrunch.com/2026/04/08/hack-for-hire-group-caught-targeting-android-devices-and-icloud-backups/

Hack-for-hire group caught targeting Android devices and iCloud backups | TechCrunch

Security researchers exposed a spying campaign by a hack-for-hire group that used Android spyware and phishing to steal iCloud credentials and hack victims’ devices.

TechCrunch

Men Are Buying #Hacking Tools to Use Against Their Wives and Friends

In #Telegram groups, men are sharing thousands of #nonconsensual images of women and girls, buying #spyware , and engaging in #doxing and sexual abuse.
#security #privacy

https://www.wired.com/story/men-are-buying-hacking-tools-to-use-against-their-wives-and-friends/

Men Are Buying Hacking Tools to Use Against Their Wives and Friends

In Telegram groups, men are sharing thousands of nonconsensual images of women and girls, buying spyware, and engaging in doxing and sexual abuse.

WIRED
Hack-for-hire group caught targeting Android devices and iCloud backups | TechCrunch

Security researchers exposed a spying campaign by a hack-for-hire group that used Android spyware and phishing to steal iCloud credentials and hack victims’ devices.

TechCrunch

Pretty sure there's #spyware on my computer even though #NordVPN tells me there are no threats. #computers

Going to do a factory reset, but any other suggestions I haven't thought of?

Why I think there is at least remnants of spyware on my computer:
- My bank account was #hacked recently and it was apparently from MY computer
- My keyboard and mouse inputs have been very glitchy since the hacking including them just not working in some games

Hack-for-Hire Campaign Targets Journalists Across MENA Region

A hack-for-hire operation with suspected links to the Bitter threat actor targeted journalists, activists, and government officials across the Middle East and North Africa between 2023 and 2025. The campaign employed sophisticated spear-phishing attacks via LinkedIn, Apple Messages, WhatsApp, and email to compromise Apple and Google accounts. Victims included Egyptian journalists Mostafa Al-A'sar and Ahmed Eltantawy, along with a Lebanese journalist whose Apple Account was fully compromised. Attackers used OAuth consent phishing and fake login pages to harvest credentials and 2FA codes. Infrastructure overlaps with Android spyware campaigns distributing ProSpy, ToSpy, and Dracarys malware. The operation represents an unusual expansion of Bitter's targeting scope into civil society, suggesting either hack-for-hire services or direct nation-state involvement in regional surveillance efforts focused on monitoring communications and harvesting personal data.

Pulse ID: 69d7e4115268dc2f9177cba2
Pulse Link: https://otx.alienvault.com/pulse/69d7e4115268dc2f9177cba2
Pulse Author: AlienVault
Created: 2026-04-09 17:38:25

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#2FA #Africa #Android #CyberSecurity #Email #Google #Government #InfoSec #LinkedIn #Malware #MiddleEast #OTX #OpenThreatExchange #Phishing #RAT #SpearPhishing #SpyWare #WhatsApp #bot #AlienVault

LevelBlue - Open Threat Exchange

Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

LevelBlue Open Threat Exchange

ICE acknowledges it is using powerful spyware

Immigration and Customs Enforcement is using spyware tools that can intercept encrypted messages. the agency potentially uses spyware Graphite, created by Israeli company, Paragon Solutions.

#ICE #HSI #Graphite #Paragon #spyware #malware #privacy #surveillance #technology #tech

https://www.npr.org/2026/04/07/nx-s1-5776799/ice-spyware-privacy

Informative video #Spyware
Informative video #Spyware