Surveillance for Hire Threat Report

A major platform investigated and disrupted seven surveillance-for-hire entities that used reconnaissance, social engineering, and exploitation to target journalists, activists, politicians and others worldwide; the report maps the surveillance chain (Reconnaissance, Engagement, Exploitation), names firms (Cobwebs, Cognyte, Black Cube, Bluehawk CI, BellTroX, Cytrox and an unknown China-based actor), provides Cytrox-related IoCs and domains, describes malware capabilities enabling device-level surveillance, summarizes takedown and notification actions (including ~50,000 alerts), and calls for greater transparency, oversight and industry collaboration to curb this industry.