Molerats__2016__CitizenLab_Mapping-FinFishers-Continuing-Proliferation_Oct-15-15.pdf

**Executive Summary:** This Citizen Lab report documents active global use of the FinFisher/FinSpy commercial spyware by at least 32 countries and multiple named government entities, describes Internet-wide scanning techniques that distinguish FinSpy Masters from anonymizing Relays, provides exploit and FinFly Web infection examples, and lists numerous indicators (IPs, domains) and proxy-master mappings illustrating large-scale, state-level surveillance infrastructure and abuse potential.