spyware
Join director Ron Deibert at Cyber Security Nordic in Helsinki for a keynote speech on the surveillance economy and the threat it poses to democracy.
Politicians in Europe and the U.S. are speaking out against the use of advertising technology to infect targets with zero-click spyware.
New findings by the Citizen Lab and SHARE Foundation show that a prominent supporter of Serbia’s student movement was targeted with spyware.
In collaboration with the SHARE Foundation, we found with high confidence that Professor Vladan Đokić, Rector of the University of Belgrade, and prominent supporter of the Serbian student movement, was hacked with NSO Group’s Pegasus spyware in 2026. Additionally, we note that Rade Bajić, who, as a prosecutor, investigated official corruption in a failed project in Belgrade, received an Apple Threat Notification. These notifications are high-confidence indicators of targeting with mercenary spyware such as Pegasus. Our investigations into these cases are ongoing.
This is an executive summary for our report “Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware.”
This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. We call the technique AdFection, and show how it was used to infect devices at Al Jazeera with Candiru’s spyware. We also uncover Discover-Tech, and show how the company helps mercenary surveillance vendors track and hack devices around the world.
Senior researcher John Scott-Railton speaks to WIRED about the lack of oversight at spyware company Paragon Solutions.
Two UN reports that the Citizen Lab submitted recommendations to have been published this month.
Join senior researchers John Scott-Railton and Kate Robertson at the RightsCon Continues Summit September 22-23.
In collaboration with the SHARE Foundation, the Citizen Lab confirmed that the iPhone of a member of Serbia’s student protest movement was infected with Pegasus spyware.