Staff from Toronto's Citizen Lab, behind exposés of government hacking tool vendors like NSO, describe meetings likely arranged to get compromising quotes
NEW YORK (AP) — The researchers who reported that Israeli software was used to spy on Washington Post journalist Jamal Khashoggi's inner circle …
Context & Ripple Effects
By early 2019, Citizen Lab had already published the finding that Israeli-made spyware was used against Jamal Khashoggi's inner circle, extending two decades of work by Ronald Deibert's team exposing government hacking vendors. This report adds a different dimension: the lab says meetings it was drawn into appear arranged to extract compromising quotes — pressure aimed at the messengers, not the findings.
The subsequent record validates why the pressure matters. Forensic checks found 23 infected phones among 67 examined, NYT reporter Ben Hubbard's iPhone was hacked in 2020 and 2021, and Pegasus reached a device inside UK's Downing Street, while sources detailed hundreds of millions of dollars in Gulf-state sales. Israel's own officials opened an investigation into NSO over the abuse allegations.
First-order effects
- Citizen Lab researchers now operate as targets themselves: entrapment-style meetings designed to produce damaging statements raise the personal and institutional cost of publishing forensics on vendors like NSO.
- NSO's public posture shifts from denying specific hacks toward contesting the credibility of the lab whose reporting triggered the Israeli government probe and sustained press scrutiny.
Second-order effects
- Journalists and activists who depend on Citizen Lab for attribution — the Hubbard case and the Khashoggi-circle reporting both rest on its forensics — face a weakened verification chain if the lab is discredited or intimidated.
- Rival coverage of the spyware trade (Gulf sales figures, infection counts) leans on the same research infrastructure, so pressure on one lab raises sourcing risk across every outlet investigating commercial surveillance vendors.
Third-order effects
- If arranged-meeting tactics against researchers become standard, independent forensic labs will need institutional protections — legal, editorial, and funding — akin to those built for investigative newsrooms, making them a distinct class of high-risk institution.
- Sustained exposure of vendor abuse, capped by the Downing Street infection and Israel's own probe, points toward commercial spyware becoming a regulated export category rather than a lightly policed gray market.
The trend: Commercial spyware is moving from an obscure vendor business to a contested industry whose researchers, customers, and exporters all face escalating scrutiny — with independent labs like Citizen Lab serving as the load-bearing verification layer.