What is spyware?
Spyware is a form of malware. It interferes with the normal operation of equipment in order to collect information and send it to another entity, which does not have the right to have access to it, without alerting the user.
Highly intrusive spyware allows unrestricted access to the targeted device. They leave very few traces, and it is therefore almost impossible for the user to know which data has been stolen.
They can target any connected device: phones, computers and other equipment connected to the Internet.
Spyware can infect a device when a user clicks on a malicious link or even without any action on their part.
Infection methods used include:
A click
The device becomes infected when the user clicks on a malicious link. Malicious links can be sent in many ways, including via SMS, email or on social media platforms.
Zero click
The device is infected without the user even interacting or doing anything.
What happens when your device is infected?
Once a device is infected with highly intrusive spyware, the person operating that software has full access to the phone and can:
- Track your location
- Access conversations, even on end-to-end encrypted messaging apps like Signal and Telegram.
- Access emails
- Access contacts
- Activate the microphone to listen to surrounding conversations
Why does spyware exist?
The surveillance industry develops spyware to circumvent the increasingly robust security protections of computers, portable devices and communications platforms. Surveillance managers want to penetrate devices in order to access the data stored on them.
While spyware tools have long been used, the strengthening of encryption since Edward Snowden’s revelations in 2013 has made personal data even more difficult to obtain through other surveillance methods. This has led to an increased demand for spyware.
Who uses spyware?
The military and intelligence and law enforcement agencies are the largest users and customers of spyware and surveillance companies.
They may want specific information like:
- Where is a person
- A journalist’s sources
- Information on events currently being organized
- Information that someone may have on acts of corruption
- Evidence of offenses
Who are the people most often targeted by spyware?
Governments and companies say these surveillance tools are only used to target “criminals and terrorists.”
But in reality, human rights defenders, journalists and many others around the world have been illegally targeted by spyware.
How does spyware impact human rights?
The illegal use of spyware violates many human rights, including the right to privacy and the rights to freedom of expression, opinion, assembly and association.
But the negative consequences of spyware do not affect everyone equally. The exploitation of this data can lead to further human rights abuses, both online and offline, particularly for people already experiencing discrimination because of their identity. These attacks can take various forms, such as blackmail, doxxing, online stalking, harassment and intimidation.
I have nothing to hide, it doesn’t concern me, does it?
Think twice.
Our research shows that activists and journalists who fear being monitored will be less likely to criticize their government or raise certain issues, for fear of being targeted, endanger themselves or their sources and loved ones.
This has consequences for all of us: the right to protest and a free press addressing the issues that shape our lives are cornerstones of any rights-respecting society.
What to do to protect yourself from spyware?
It’s difficult to fully protect yourself from attacks, but here are some essential digital security tips:
- Make sure that your Internet browser and the system software of your mobile phone are always up to date.
- On Apple devices, enable “Isolation” high-security mode.
- Be wary of links from strangers.
- Pay attention to any changes in the operation of your devices.
- Using a virtual private network can help prevent certain forms of surveillance and censorship.
- Change the privacy settings on your Facebook accounts to limit your profile visibility to your existing friends and evaluate any request before accepting.
- Visit Amnesty’s secure Ognon site privately and anonymously using the Tor network browser.
When governments or corporations attack people who defend our rights, we are all in danger. That’s why we’re calling on countries around the world to ban all highly intrusive spyware.
