Counterintelligence for civil society

Investigating novel threats to democracy, human rights, and global security in the digital ecosystem.

Not Safe for Politics

Cellebrite Used on Kenyan Activist and Politician Boniface Mwangi

Targeted Surveillance

Following the widely-condemned arrest in July 2025 of prominent Kenyan opposition voice Boniface Mwangi, the Citizen Lab analyzed artefacts from devices seized during the arrest. We found that Cellebrite’s forensic extraction tools were used on his Samsung phone while it was in police custody. This case adds to the concerning pattern of the misuse of Cellebrite technology by government clients.

February 17, 2026

From Protest to Peril

Cellebrite Used Against Jordanian Civil Society

Targeted Surveillance

Through a multi-year investigation, we find that the Jordanian security apparatus has deployed forensic extraction products manufactured by Cellebrite against civil society devices. We release these findings alongside reporting from the Organized Crime and Corruption Reporting Project (OCCRP) which includes interviews with a few of the victims.

January 22, 2026

We Say You Want a Revolution

PRISONBREAK – An AI-Enabled Influence Operation Aimed at Overthrowing the Iranian Regime

Disinformation

The control and strategic manipulation of information has long played a role in the geopolitical and ideological competition between the Islamic Republic of Iran and its political adversaries, including Israel. Prior Citizen Lab research has uncovered Iranian disinformation efforts, however, in this investigation we focus on the “other side” of the geopolitical competition. We analyzed an influence operation we assess as most likely undertaken by an entity of the Israeli government or a private subcontractor working closely with it.

October 14, 2025

Counterintelligence for civil society

Investigating novel threats to democracy, human rights, and global security in the digital ecosystem.

Counterintelligence for civil society

Investigating novel threats to democracy, human rights, and global security in the digital ecosystem.

Not Safe for Politics

Cellebrite Used on Kenyan Activist and Politician Boniface Mwangi

Targeted Surveillance

Following the widely-condemned arrest in July 2025 of prominent Kenyan opposition voice Boniface Mwangi, the Citizen Lab analyzed artefacts from devices seized during the arrest. We found that Cellebrite’s forensic extraction tools were used on his Samsung phone while it was in police custody. This case adds to the concerning pattern of the misuse of Cellebrite technology by government clients.

February 17, 2026

Read the full report

From Protest to Peril

Cellebrite Used Against Jordanian Civil Society

Targeted Surveillance

Through a multi-year investigation, we find that the Jordanian security apparatus has deployed forensic extraction products manufactured by Cellebrite against civil society devices. We release these findings alongside reporting from the Organized Crime and Corruption Reporting Project (OCCRP) which includes interviews with a few of the victims.

January 22, 2026

Read the full report

We Say You Want a Revolution

PRISONBREAK – An AI-Enabled Influence Operation Aimed at Overthrowing the Iranian Regime

Disinformation

The control and strategic manipulation of information has long played a role in the geopolitical and ideological competition between the Islamic Republic of Iran and its political adversaries, including Israel. Prior Citizen Lab research has uncovered Iranian disinformation efforts, however, in this investigation we focus on the “other side” of the geopolitical competition. We analyzed an influence operation we assess as most likely undertaken by an entity of the Israeli government or a private subcontractor working closely with it.

October 14, 2025

Read the full report

The Citizen Lab is an interdisciplinary research unit at the Munk School of Global Affairs & Public Policy, University of Toronto. We apply our collective expertise in the fields of law, computer science, cybersecurity, political science, and social sciences to investigate complex issues of the 21st century.

Get the latest research in your inbox.

Recent news

Happening on March 10, 2026

Hosted by Access Now’s Digital Security Helpline Registration required. Join Citizen Lab senior researcher Rebekah Brown for Access Now’s Digital Security Helpline webinar on preventing spear-phishing attacks against civil society. The conversation will centre on practical examples and cases of attacks, offering insight into best practices to prevent and contain these threats.

In the Media

Austrian Interior Ministry Using Cobwebs Surveillance Software

Citizen Lab research fellow Wolfie Christl spoke with Der Standard about the Austrian Interior Ministry’s €900K investment in Tangles, a surveillance software that gathers and analyzes data from across social media and the web. Christl and a Citizen Lab colleague discovered that the tool was purchased by the Austrian ministry last summer. Experts are concerned […]

March 2, 2026
Submission

Submissions to the Committee on Enforced Disappearances

And the UN Working Group on Enforced and Involuntary Disappearances

Citizen Lab researchers have co-authored two submissions to the Committee on Enforced Disappearances and UN Working Group on Enforced and Involuntary Disappearances.  One submission focuses on digital tools that enable disappearances, calling on host states to protect against rights violations caused by digital transnational repression. The authors argue  that enforced disappearances have been facilitated by […]