Mercenary Spyware & Commercial Surveillance

The mercenary spyware industry represents one of the most consequential — and legally contested — sectors of the global cyber arms market. Companies like NSO Group (Pegasus), Intellexa (Predator), Paragon Solutions, and dozens of less-publicized vendors sell mobile device intrusion capabilities to government clients, enabling covert surveillance of journalists, opposition politicians, activists, and business leaders.

Zero-click exploits targeting iOS and Android — the crown jewels of these toolkits — exploit vulnerabilities in iMessage, WhatsApp, cellular protocols, and other attack surfaces with no user interaction required. Forensic research by Citizen Lab, Amnesty International, and Access Now has exposed hundreds of confirmed spyware victims across 50+ countries.

Regulatory responses have accelerated: the US sanctioned NSO Group and Candiru, the EU launched formal investigations into Predator use by member states, and the Pall Mall Process established multilateral norms discussions. Yet the industry persists through corporate rebranding, jurisdictional arbitrage, and the persistent demand from authoritarian and democratic governments alike.