You’ve been targeted by government spyware. Now what?

This article explains how to respond to targeted mercenary spyware alerts from Apple, Google, and WhatsApp, emphasizing the credibility of such warnings and immediate hardening actions like Lockdown Mode, Google Advanced Protection, and MFA. It outlines investigation options—self-triage with Mobile Verification Toolkit (MVT), remote diagnostics, and in-depth forensics—and points to trusted support channels including Access Now’s Digital Security Helpline, Amnesty International, Citizen Lab, and select private providers. The piece highlights attacker behaviors such as “smash and grab” data exfiltration that minimizes forensic artifacts and offers practical guidance on when and how to publicize an incident.