Citizen Lab is a organization tracked across 7 threat clusters and 8 intelligence report mentions on ThreatCluster. First observed November 26, 2025; most recent activity July 15, 2026.
Russian authorities used Cellebrite's forensic tools to access the iPhone of political activist Andrey Pivovarov in June 2021, despite Cellebrite's announcement in March 2021 that it would cease sales to Russia. The…
A data leak revealed over 200 Spanish mobile numbers were potential targets of Pegasus spyware, linked to Morocco. The Spanish government confirmed surveillance of former CUP MPs David Fernández and Carles Riera,…
Stelios Kouloglou, a former Member of the European Parliament, was hacked with Pegasus spyware while serving on the PEGA Committee investigating the use of such surveillance tools in the EU. Citizen Lab confirmed three…
In 2016, climate activists, including Kert Davies, were targeted by a phishing campaign while seeking to hold Exxon Mobil accountable for climate deception. The campaign involved over 100 victims receiving phishing…
On May 7, 2026, Rep. Summer Lee demanded a briefing from the Commerce Department regarding the Trump Administration's connections to NSO Group, an Israeli spyware firm blacklisted by the U.S. government. The company,…
Paragon Solutions is under scrutiny by Italian prosecutors following allegations that its Graphite spyware was used to target journalists and activists in Italy. WhatsApp and Apple notified several individuals,…
In 2022, digital forensics expert Robert Jan Mora identified unusual malware evidence while reviewing Pune Police reports related to the Bhima Koregaon case. This case involves the ongoing persecution of 16 human rights…