We investigate a coordinated network of inauthentic X accounts that is spreading AI-generated content to induce revolt in Iran. The network has been active since 2023, but increased activity during the Iran-Israel conflict in June 2025.
Keir Giles, a prominent expert on Russia, was targeted with a new form of social-engineering attack that leverages App-Specific Passwords. Google links the operation to UNC6293, a Russian state-backed group.
Our preliminary analysis of Bill C-2 situates the legislation within the context of existing research by the Citizen Lab about two potential data-sharing treaties that are most relevant to the new proposed powers being introduced in Bill C-2: the Second Additional Protocol to the Budapest Convention (2AP) and the CLOUD Act. Both of which carry significant constitutional and human rights risks.
On April 29, 2025, a select group of iOS users were notified by Apple that they were targeted with advanced spyware. Among the group were two journalists who consented to the technical analysis of their cases. In this report, we discuss key findings from our forensic analyses of their devices.
The Citizen Lab is an interdisciplinary laboratory based at the Munk School of Global Affairs & Public Policy, University of Toronto, focusing on research and development at the intersection of information and communication technologies, human rights, and global security. Learn more.
Citizen Lab director Ron Deibert is the recipient of the 2025 Sterling Prize in Support of Controversy by Simon Fraser University (SFU). The award recognizes his ongoing work at the intersection of global security, digital technologies, and human rights. SFU professor David Zandvliet says, “As chair of the Sterling Prize committee, I find his… Read more »
Citizen Lab senior researcher Alberto Fittarelli speaks with Negar Mortazavi, host of The Iran Podcast, about Israel-linked influence operations pushing for regime change in Iran. Fittarelli explains how an artificial network of users on X amplified calls for unrest, sometimes with the aid of AI-generated images and videos. The perpetrators of the operation were “trying… Read more »
Citizen Lab senior researcher John Scott-Railton is presenting in the panel titled “From Stasi to Spyware: Old Tactics, New Technology” at Berlin Freedom Week on November 12, 2025.
In many countries, laws against cybercrime are being weaponized to repress journalism. Speaking to the Columbia Journalism Review, Citizen Lab doctoral fellow Gabrielle Lim warns that democratic countries passing similar laws could provide cover to repressive authoritarian regimes. “Unfortunately, most of the laws being passed will have little effect in actually curbing misinformation, but instead… Read more »
Canada’s Bill C-8 (formerly Bill C-26) is proposed cybersecurity legislation that would introduce broad information collection and sharing powers, including the warrantless collection of information from telecommunication providers, and could also undermine encryption and communications security. In a brief submitted by the Citizen Lab to the Standing Committee on Public Safety and National Security (SECU)… Read more »
In an interview with What Bitcoin Did, Citizen Lab senior researcher John Scott-Railton discusses the proliferation of spyware and the repercussions of its use on victims. He explains how mass surveillance “ultimately leads to self-censorship,” with significant implications for our freedom. Watch here.
