FinSpy Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
17
occurrences
First Seen
November 18, 2025
Last Seen
July 28, 2026

FinSpy (also known as FinFisher) is a long-standing surveillanceware family marketed to government and law-enforcement actors, capable of covertly monitoring infected devices across multiple platforms and exfiltrating data.

Overview

FinSpy (also known as FinFisher) is a long-standing surveillanceware family marketed to government and law-enforcement actors, capable of covertly monitoring infected devices across multiple platforms and exfiltrating data. It is widely cited as a prominent example of state-sponsored spyware due to its stealth capabilities, broad platform support, and documented use against journalists, activists, and dissidents, making it highly significant in cybersecurity and privacy debates.

Related Threat Clusters

  • Phineas Fisher's Hacking Legacy: Hacking Team's Demise and Ongoing Mystery

    Phineas Fisher, a notorious hacktivist, successfully breached Hacking Team in July 2015, stealing over 400GB of sensitive data, including source code, internal emails, and customer lists. This breach exposed the…

    10 articles · Updated July 25, 2026
  • UK Supreme Court Denies Bahrain State Immunity in Spyware Case

    The UK Supreme Court ruled that Bahrain cannot claim state immunity against a lawsuit by two dissidents, Saeed Shehabi and Moosa Mohammed, who allege their computers were hacked with FinSpy spyware in 2011. The court's…

    33 articles · Updated July 27, 2026
  • Black Hat Europe 2025 Features Keynote on Cyber Threats

    Black Hat Europe 2025 announced its keynote lineup, which includes BBC Cyber Correspondent Joe Tidy. The event will cover critical topics such as ransomware economics, compliance vulnerabilities, criminal progression,…

    2 articles · Updated November 18, 2025
  • Black Hat Europe 2025 Features Keynotes on Cyber Threats

    Black Hat Europe 2025 announced its keynote lineup, featuring Joe Tidy, BBC's Cyber Correspondent, among others. The event will cover critical topics including ransomware economics, compliance vulnerabilities, and…

    2 articles · Updated November 18, 2025

Recent Intelligence Reports

  • Bahrain loses bid to block dissidents' spyware lawsuit in UK — Aol · July 28, 2026
  • The Kingdom of Bahrain v Shehabi: Supreme Court allows spyware hacking claim to proceed — Solicitorsjournal · July 28, 2026
  • UK Supreme Court rejects Bahrain immunity claim in dissidents' spyware lawsuit — Ground.News · July 27, 2026
  • The British Supreme Court has rejected Bahrain's request for immunity in the spyware case — Ua.News · July 27, 2026
  • UK: Supreme Court ruling on Bahrain spyware case sends a clear message against ... — Amnesty.Uk · July 27, 2026
  • Dissidents win in Supreme Court against Bahrain appeal — Leighday · July 27, 2026
  • UK Court Denies Bahrain State Immunity in Spyware Lawsuit | Law-Order — Devdiscourse · July 27, 2026
  • Bahrain cannot claim state immunity over alleged UK spyware campaign — Iclg · July 27, 2026

CVSS v3.1 Breakdown