John Scott-Railton

Oct 9, 2023 | citizenlab.ca | Bill Marczak |John Scott-Railton |Ron Deibert

Amnesty International’s Security Lab has just published Caught in the Net as part of the European Investigative Collaborations‘ Predator Files, which details a threat actor sending what they assess to be Predator infection links on social media in replies to Twitter / X posts by officials, journalists and other members of civil society. The Citizen Lab independently received and collected a set of since-deleted posts by this threat actor, which we call REPLYSPY.

Apr 18, 2023 | citizenlab.ca | Bill Marczak |John Scott-Railton |Bahr Abdul Razzak |Ron Deibert

Key FindingsIn 2022, the Citizen Lab gained extensive forensic visibility into new NSO Group exploit activity after finding infections among members of Mexico’s civil society, including two human rights defenders from Centro PRODH, which represents victims of military abuses in Mexico. Our ensuing investigation led us to conclude that, in 2022, NSO Group customers widely deployed at least three iOS 15 and iOS 16 zero-click exploit chains against civil society targets around the world.