Sanctioned spyware maker Intellexa had direct access to government espionage victims, researchers say

Recent findings from Amnesty International reveal that Intellexa, a controversial spyware manufacturer, reportedly had remote access to the surveillance systems of its government clients. This access allowed the company's personnel to view sensitive personal information of individuals targeted by its Predator spyware. On Thursday, Amnesty, along with various media partners such as Haaretz from Israel, Inside Story from Greece, and Inside IT from Switzerland, released a series of reports based on leaked documents from Intellexa. These documents include internal files, marketing materials, and training videos that raise serious questions about the company's operations. One of the most alarming discoveries is that Intellexa employees could allegedly utilize TeamViewer, a widely-used remote desktop application, to access the surveillance systems of certain clients. A leaked training video reportedly showcases this access, displaying components of the Predator spyware interface, including a dashboard and a storage system containing photos and messages collected from victims. According to Amnesty's analysis, the training video indicates live attempts to infect real targets, with specific references to an incident involving a target in Kazakhstan. The video reportedly included details such as an infection URL and the IP address of the targeted device, raising concerns about the ethical implications of such access. Traditionally, companies like Intellexa maintain that they do not access the data of their clients' surveillance targets, citing legal liabilities and the desire to keep sensitive investigations confidential. Paolo Lezzi, CEO of Memento Labs, emphasized that such remote access is highly unusual and not acceptable for government agencies, expressing skepticism about the authenticity of the leaked training video's claims. However, Amnesty's head of security lab, Donncha Ó Cearbhaill, insisted that the video indeed shows Intellexa staff accessing a live customer surveillance system. This revelation has sparked significant concerns regarding the potential exposure of sensitive data to foreign surveillance companies, which may not adequately safeguard such information. Intellexa has not publicly responded to these allegations. Meanwhile, a lawyer representing the company's founder, Tal Dilian, stated that he has not engaged in illegal activities. Dilian, a figure known for his controversial role in the spyware industry, has faced scrutiny for his business practices and was subjected to U.S. sanctions in 2024 for alleged misuse of spyware against American citizens, including government officials. As investigations continue, the implications of these revelations could further complicate the already contentious landscape of government surveillance and privacy rights.