logo

Citizen Lab Finds Cellebrite Tool Used on Kenyan Activist’s Phone in Police Custody

ID: a584b0f0-2965-5f75-9ab4-60a445b53100

STIX ID: report--a584b0f0-2965-5f75-9ab4-60a445b53100

Feed Name: The Hacker News

Threat Score
75/100

Date Published: 2026-02-18

Date Updated: 2026-04-24

Author: [email protected] (The Hacker News)

...
...

Recent investigative reports document misuse of commercial forensic and spyware tools against civil society: Citizen Lab attributes a full-device extraction via Cellebrite on a Kenyan activist's seized phone in July 2025, and Amnesty/Recorded Future/others confirmed a Predator spyware infection against an Angolan journalist in May 2024. The coverage details technical indicators, infection vectors (including WhatsApp infection links), anti-forensics and indicator-suppression techniques, and situates these cases within a wider pattern of government-enabled surveillance using mercenary spyware.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.