Unveiling the Dark Side of Surveillance: How Intellexa's Predator Spyware Targeted an Angolan Journalist
The Shocking Truth: A Government-Backed Attack on Press Freedom
In a chilling development, a government client of the controversial spyware company Intellexa has been implicated in the hacking of a prominent journalist's iPhone in Angola. This incident, exposed by Amnesty International, sheds light on the growing trend of state-sponsored surveillance and its impact on civil society.
The human rights organization's report reveals a sophisticated attack on Teixeira Cândido, a local journalist and press freedom advocate. In 2024, Cândido became the target of a series of malicious links sent via WhatsApp, which, upon clicking, led to the installation of Intellexa's Predator spyware on his iPhone.
The Controversy Deepens: Intellexa's Opaque Web
Intellexa, a company shrouded in secrecy, has long been at the center of controversy. Operating from various jurisdictions to evade export laws, Intellexa uses an intricate network of corporate entities to conceal its activities. This has made it challenging to pinpoint the exact source of the attack on Cândido.
The report highlights a concerning pattern: government clients of commercial surveillance vendors are increasingly using spyware to target journalists, politicians, and ordinary citizens, including critics. This is not an isolated incident; previous research has uncovered Predator's use in Egypt, Greece, and Vietnam, where it was employed to target U.S. officials.
A Web of Evidence: Forensics Uncover the Attack
Amnesty's researchers meticulously examined forensic traces on Cândido's phone, linking the intrusions to Intellexa. They identified infection servers previously associated with Intellexa's spyware infrastructure, providing concrete evidence of the company's involvement.
The report also raises questions about the capabilities of the Predator spyware. Despite running an outdated version of iOS, Cândido's phone was hacked. The researchers discovered that Predator remained hidden by impersonating legitimate iOS system processes, making it difficult to detect.
A Global Concern: The Impact on Press Freedom
This incident in Angola is not an isolated case. Amnesty believes that Cândido may be just one of many targets in the country. The researchers found multiple domains linked to the spyware maker used in Angola, suggesting a broader campaign. The report emphasizes that the exact customer behind the Predator spyware in Angola remains unidentified.
Unraveling the Mystery: The Role of Leaks
Last year, leaks of internal documents revealed that Intellexa employees had remote access to customers' systems, potentially granting the spyware maker visibility into government surveillance operations. These leaks, along with the current report, underscore Intellexa's continued activity despite controversies and sanctions.
The Call for Action: Addressing the Surveillance Crisis
As the world grapples with the implications of state-sponsored surveillance, Amnesty International's report serves as a stark reminder of the urgent need for transparency and accountability. The organization urges the public to contact them with information about Intellexa and other spyware makers, emphasizing the importance of collective action in safeguarding press freedom and human rights.
Contact Us: Join the Fight for Digital Privacy
If you have more information about Intellexa or other spyware makers, reach out securely from a non-work device. Contact Lorenzo Franceschi-Bicchierai on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb. Email him at lorenzo@techcrunch.com. Together, we can shed light on the dark corners of surveillance and protect the voices that matter.
