The Rising Threat of Spyware: How Journalists and Activists Are Being Targeted—and What Tech Giants Are Doing to Help
In an era where digital surveillance has become alarmingly commonplace, journalists, human rights defenders, and political dissidents are increasingly finding themselves in the crosshairs of sophisticated spyware attacks. What was once a rare and exotic threat has now evolved into a pervasive norm, with governments and private entities leveraging advanced tools to infiltrate devices and monitor individuals. Recent incidents underscore the gravity of this issue, prompting major tech companies to step up their defenses and offer enhanced protections to users worldwide.
In early 2025, WhatsApp notified approximately 90 users across Europe—many of them journalists and civil society members—that they had been targeted by Israeli spyware company Paragon Solutions. Months later, Apple issued threat notifications to a new group of iOS users, forensic analysis confirmed that two journalists had been compromised using Paragon’s Graphite spyware in a zero-click attack. These incidents are not isolated; they are emblematic of a broader trend that has been escalating over the past 15 years, with security researchers documenting countless cases of governments targeting critics, activists, and opposition figures.
Spyware attacks are particularly insidious because they rely on highly sophisticated tools that grant operators virtually unrestricted access to a target’s device. Once installed, spyware can silently record phone calls, intercept chat messages, access photos, and even activate cameras and microphones to monitor surroundings. These capabilities make smartphones—devices that store vast amounts of personal data—especially vulnerable.
The Arms Race Between Spyware Makers and Tech Companies
In response to the growing threat, tech giants like Apple, Google, and Meta have developed opt-in security features designed to counter targeted spyware attacks. These features, while not foolproof, provide an additional layer of protection by limiting certain functionalities that could be exploited by hackers.
Runa Sandvik, a security researcher with over a decade of experience protecting journalists, emphasizes the importance of these tools. “These features are free, easy to enable, and the best defense we have today against sophisticated spyware,” she said. “If they get in the way of something you need to do, you can easily turn them off again—meaning it costs very little to turn them on and try them out.”
While no security measure is perfect, these features have proven effective in thwarting attacks. For instance, Apple’s Lockdown Mode has successfully blocked spyware intrusions in the past, and Google’s Advanced Protection Program has made accounts more resilient against malicious actors. Similarly, WhatsApp’s Strict Account Settings provide enhanced privacy controls for its billions of users.
Apple’s Lockdown Mode: A Strong First Line of Defense
Apple introduced Lockdown Mode in 2022, describing it as a “extreme, optional protection” for users who face “grave, targeted threats to their digital security.” When activated, Lockdown Mode restricts certain functionalities to reduce the device’s attack surface. For example, it blocks most iMessage attachments, disables link previews, and prevents incoming FaceTime calls from unknown contacts.
The effectiveness of Lockdown Mode was demonstrated in 2023 when Citizen Lab confirmed that it had blocked an attack using NSO Group’s notorious Pegasus spyware. As of March 2026, Apple reported that no device with Lockdown Mode enabled had ever been successfully compromised by spyware.
To enable Lockdown Mode, users can navigate to Settings > Privacy & Security > Lockdown Mode. While the feature may initially cause inconvenience—such as blocking certain websites or limiting app functionalities—it offers unparalleled security for at-risk individuals.
Google’s Advanced Protection Program: Fortifying Accounts
Google’s Advanced Protection Program (APP), launched in 2017, is tailored for users who face heightened risks of targeted attacks. The program implements robust safeguards, such as restricting third-party app access, scanning emails for phishing attempts, and enforcing Safe Browsing in Chrome.
One of APP’s standout features is its reliance on physical security keys or passkeys for account verification, making it significantly harder for attackers to gain unauthorized access. Users can activate APP by visiting its official page and following the setup instructions.
Android’s Advanced Protection Mode: A New Contender
Inspired by Apple’s Lockdown Mode, Google introduced Advanced Protection Mode for Android in 2025. This feature enhances device security by enabling Google Play Protect, blocking app installations from unknown sources, and disabling connections to 2G networks. Additionally, it incorporates optional Intrusion Logging, which helps researchers investigate spyware attacks.
Android users can activate Advanced Protection Mode by navigating to Settings > Security and Privacy > Advanced Protection > Device Protection.
WhatsApp’s Strict Account Settings: Protecting Global Communication
As one of the most widely used messaging platforms, WhatsApp has become a prime target for spyware attacks. In 2019, a campaign by NSO Group compromised approximately 1,200 users, and early 2025 saw another operation targeting around 90 users in Europe.
To address these threats, WhatsApp introduced Strict Account Settings in 2025. This feature enhances privacy by enabling two-step verification, blocking attachments from unknown senders, and hiding IP addresses during calls. Users can activate Strict Account Settings by navigating to Settings > Privacy > Advanced.
A Constant Battle for Digital Security
The battle between spyware makers and tech companies is an ongoing arms race, with each side continually adapting to outmaneuver the other. While no security measure can guarantee absolute protection, the tools developed by Apple, Google, and Meta represent a significant step forward in safeguarding users against sophisticated attacks.
For journalists, activists, and others at risk, enabling these features is a proactive measure that can make a critical difference. As Sandvik aptly puts it, “It costs very little to turn them on and try them out.” In a world where digital surveillance is increasingly prevalent, these defenses offer a glimmer of hope for preserving privacy and security.
The fight against spyware is far from over, but with continued innovation and vigilance, tech companies and users alike can stay one step ahead of those seeking to exploit vulnerabilities in our digital lives.
