Staff from Toronto's Citizen Lab, behind exposés of government hacking tool vendors like NSO, describe meetings likely arranged to get compromising quotes
NEW YORK (AP) — The researchers who reported that Israeli software was used to spy on Washington Post journalist Jamal Khashoggi's inner circle …
Context & Ripple Effects
Toronto's Citizen Lab has spent roughly two decades exposing digital threats, and its reporting on NSO Group has been the sharpest edge of that work: it tied Israeli spyware to surveillance of Jamal Khashoggi's inner circle and later confirmed the Pegasus hacking of NYT reporter Ben Hubbard's iPhone. NSO's business behind those findings is substantial — sources detail Gulf-state deals worth hundreds of millions of dollars for Pegasus.
Against that backdrop, this report lands differently than a typical vendor dispute: Citizen Lab staff describe meetings they believe were arranged specifically to bait them into compromising quotes. If a vendor under investigation by Israel's own government — a probe NSO confirmed after officials visited its Tel Aviv office — is working to discredit the researchers documenting abuse, the fight over Pegasus has moved from forensics to reputation.
First-order effects
- Citizen Lab researchers now face a second front: alongside tracking spyware infections, they must treat outreach meetings as potential quote-trapping operations aimed at undermining their credibility.
- NSO gains a potential counter-narrative tool — any extracted misstatement could be used to cast doubt on findings like the 23-phone infection investigation reported by the Washington Post.
Second-order effects
- Other spyware vendors facing Citizen Lab scrutiny have a template to copy: rather than contesting forensic evidence phone by phone, attack the independence of the lab producing it.
- Universities and funders hosting watchdog research groups must weigh whether their researchers are being set up, raising the operational cost of independent spyware accountability.
Third-order effects
- If discrediting campaigns become standard practice, the commercial spyware industry's conflict expands from targeting journalists and activists to targeting the small research community capable of proving those targets were hit — thinning the accountability layer the whole ecosystem depends on.
- Sustained pressure on vendors like NSO points toward formalized oversight of the spyware trade, whether via government probes like Israel's or export controls, since self-policing claims lose force when the auditors themselves are attacked.
The trend: Commercial spyware vendors are shifting from denying researchers' forensic findings to actively discrediting the researchers who produce them, making independent labs like Citizen Lab targets in their own right.