{"id":53679,"date":"2023-09-14T13:13:15","date_gmt":"2023-09-14T13:13:15","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/35011\/Exiled-Russian-Journalist-Hacked-Using-NSO-Group-Spyware.html"},"modified":"2023-09-14T13:13:15","modified_gmt":"2023-09-14T13:13:15","slug":"exiled-russian-journalist-hacked-using-nso-group-spyware","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/","title":{"rendered":"Exiled Russian Journalist Hacked Using NSO Group Spyware"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/i.guim.co.uk\/img\/media\/fb5fa1534df97ae83b9e555724a4b99f227c1007\/384_237_2085_1251\/master\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863\" class=\"ff-og-image-inserted\"><\/div>\n<p class=\"dcr-1kas69x\">An award-winning Russian journalist living in exile in <a href=\"https:\/\/www.theguardian.com\/world\/europe-news\" data-link-name=\"in body link\" data-component=\"auto-linked-tag\">Europe<\/a> was hacked using Israeli spyware made by NSO Group, according to a joint investigation by the Citizen Lab and Access Now.<\/p>\n<p class=\"dcr-1kas69x\">Galina Timchenko was hacked on or around 10 February, at a time when she was based in Berlin, Germany, marking the first time that an independent Russian journalist \u2013 <a href=\"https:\/\/www.theguardian.com\/media\/2023\/jan\/26\/russia-outlaws-meduza-in-attempt-to-stamp-out-independent-news\" data-link-name=\"in body link\">whose media outlet has been targeted by Moscow and declared an \u201cundesirable organisation\u201d<\/a> \u2013 is known to have been hacked with spyware.<\/p>\n<p class=\"dcr-1kas69x\">The attack occurred shortly before a meeting in Berlin of the main independent Russian media in exile, in which participants including Timchenko discussed the pressure they were under and how to respond to it. It was organised by a Russian organisation called Redkollegiya.<\/p>\n<p class=\"dcr-1kas69x\">\u201cThrough me they could have eavesdropped on this meeting,\u201d the journalist said in an interview with the Guardian.<\/p>\n<p class=\"dcr-1kas69x\">Once a phone is infected with Pegasus \u2013 NSO\u2019s signature spyware \u2013 the operator of the hacking software has total control over a phone, including access to photos, encrypted apps and the microphone, which allows the user to turn the mobile into a listening device.<\/p>\n<p class=\"dcr-1kas69x\">The news has raised questions about who might have been behind the attack. Researchers said they were not immediately able to identify who might have targeted Timchenko\u2019s phone, but said it was hacked <a href=\"https:\/\/www.theguardian.com\/commentisfree\/2022\/jul\/18\/pegasus-project-surveillance-tech-spying-nso-group\" data-link-name=\"in body link\">using Pegasus<\/a>, one of the world\u2019s most sophisticated military-grade spyware tools.<\/p>\n<p class=\"dcr-1kas69x\">Russia would be considered an obvious candidate to have targeted Timchenko, who is the co-founder and chief executive of Meduza, an independent Russian news website that has a record of publishing critical articles about the war in Ukraine and investigations into the Russian elite, including those close to Vladimir Putin.<\/p>\n<p class=\"dcr-1kas69x\"><a href=\"https:\/\/www.theguardian.com\/us-news\/2021\/nov\/03\/nso-group-pegasus-spyware-us-blacklist\" data-link-name=\"in body link\">NSO<\/a>, which is closely regulated by the Israeli government, sells only to government agencies. The company is known to sell to authorities in many European countries \u2013 including the German police \u2013 and countries in the Middle East and Africa.<\/p>\n<p class=\"dcr-1kas69x\">Timchenko told the Guardian she personally believed that Russia was ultimately behind the hacking of her phone.<\/p>\n<p class=\"dcr-1kas69x\">\u201cBefore this, all the other attacks were from Russia. We\u2019ve had a number of different attacks and they were all from Russia. So if it swims like a duck, quacks like a duck, it\u2019s probably a duck,\u201d she said.<\/p>\n<p class=\"dcr-1kas69x\">But the Citizen Lab and Access Now, two of the world\u2019s experts on surveillance and spyware, said they believed it was \u201cunlikely\u201d that Russia was a client of NSO Group, and emphasised that they had not seen any other indications from research that Moscow might be behind the attack.<\/p>\n<p class=\"dcr-1kas69x\">The declaration left a few other possible options, the researchers said. Meduza is based in Latvia, which appears to be an NSO Group customer. But researchers said there was no evidence that Latvia had the ability to use Pegasus software outside its own border.<\/p>\n<p class=\"dcr-1kas69x\">Germany is a known client, too, but the researchers said they believed it was unlikely that a German police agency \u2013 which is believed to use Pegasus \u2013 had targeted Timchenko. The Netherlands intelligence and security service, the Dutch intelligence agency, and an Estonian government agency both appear to use Pegasus outside their jurisdiction, including within Europe.<\/p>\n<p class=\"dcr-1kas69x\">The Guardian has previously reported that Estonia, a Nato member, acquired access to Pegasus in 2019 but was informed by NSO in August that year that <a href=\"https:\/\/www.theguardian.com\/world\/2022\/mar\/23\/israel-ukraine-pegasus-spyware-russia\" data-link-name=\"in body link\">the company would not permit Estonian officials to use the spyware against Russian targets<\/a>.<\/p>\n<p class=\"dcr-1kas69x\">Timchenko was using a Latvian country code at the time she was hacked.<\/p>\n<p class=\"dcr-1kas69x\">\u201cIt is plausible that one of these agencies was targeting Timchenko although it would be unclear under what justification,\u201d researchers said. They added that it was possible that a Russian ally known to be a Pegasus customer could be behind the spying on behalf of Russia, including Azerbaijan or Kazakhstan, though researchers said they had never observed attacks against individuals living in the EU by either country.<\/p>\n<p class=\"dcr-1kas69x\">NSO does not disclose the names of its clients. But a spokesperson appeared to suggest that Russia was not a client. In a statement, the spokesperson said: \u201cNSO only sells its technologies to allies of the US and Israel and always investigates credible allegations of misuse, taking prompt action if warranted.\u201d<\/p>\n<p class=\"dcr-1kas69x\">The company has said it sells its spyware to countries to be used only to fight serious crime and terrorism threats. It has also denied having any knowledge or control of individuals who are targeted once their spyware licences are sold to government clients, who then operate the hacking software.<\/p>\n<p class=\"dcr-1kas69x\">Timchenko said the attack against her was disconcerting, because she had never considered herself of interest to the security services.<\/p>\n<p class=\"dcr-1kas69x\">\u201cI haven\u2019t engaged in journalistic work for some time. I\u2019m not part of the editorial board. I don\u2019t know what they are planning. I deal with publishing, new projects, money, contracts,\u201d she said, adding that it was a similar sensation to having one\u2019s wallet stolen.<\/p>\n<p class=\"dcr-1kas69x\">\u201cThere\u2019s nothing really there but those are your things, it\u2019s very uncomfortable,\u201d she said. However, she acknowledged she was concerned about the exposure of her contact list.<\/p>\n<p class=\"dcr-1kas69x\">Meduza was declared an \u201cundesirable organisation\u201d by the Russian government earlier this year, making it virtually impossible to conduct reporting or collect revenue in the country.<\/p>\n<p class=\"dcr-1kas69x\">Before founding Meduza, Timchenko was the editor of Lenta.ru, an extremely popular website that pioneered online news in Russia.<\/p>\n<p class=\"dcr-1kas69x\">Timchenko was fired by Lenta.ru\u2019s billionaire owner due to her team\u2019s reporting on the 2014 Ukraine crisis. The decision sparked <a href=\"https:\/\/www.theguardian.com\/world\/2014\/oct\/23\/russian-journalists-meduza-project-latvia-kremlin-crackdown\" data-link-name=\"in body link\">a staff revolt that resulted in Timchenko co-founding Meduza<\/a> in Riga, Latvia, where she believed the website would have more protection from the Russian government and Kremlin-friendly business people.<\/p>\n<p class=\"dcr-1kas69x\">She is one of <a href=\"https:\/\/cpj.org\/awards\/galina-timchenko\/\" data-link-name=\"in body link\">the most prominent Russian journalists<\/a> outside the country. She appears regularly at academic forums and events, including those that attract prominent figures in the Russian opposition and \u00e9migr\u00e9 communities.<\/p>\n<p class=\"dcr-1kas69x\">The attack was condemned by Sophie in \u2018t Veld, a Dutch MEP and high representative for foreign affairs and security policy. In <a href=\"https:\/\/twitter.com\/SophieintVeld\/status\/1701953607111778607\" data-link-name=\"in body link\">a tweet<\/a> she said: \u201c3 years of revelations, parliamentary&amp;judicial inquiries, US blacklisting and public outcry, but the abuse of #spyware #Pegasus continues right under our noses.\u201d<\/p>\n<p class=\"dcr-1kas69x\">The investigation began after Apple warned Timchenko and other targets in June 2023 that they may have been targeted with spyware.<\/p>\n<p>READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/35011\/Exiled-Russian-Journalist-Hacked-Using-NSO-Group-Spyware.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[277],"tags":[10695],"class_list":["post-53679","post","type-post","status-publish","format-standard","hentry","category-cybersecurity-blogs","tag-headlinehackergovernmentphonerussiacyberwarspywareapple"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Exiled Russian Journalist Hacked Using NSO Group Spyware 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Exiled Russian Journalist Hacked Using NSO Group Spyware 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-14T13:13:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i.guim.co.uk\/img\/media\/fb5fa1534df97ae83b9e555724a4b99f227c1007\/384_237_2085_1251\/master\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Exiled Russian Journalist Hacked Using NSO Group Spyware\",\"datePublished\":\"2023-09-14T13:13:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/\"},\"wordCount\":1052,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i.guim.co.uk\\\/img\\\/media\\\/fb5fa1534df97ae83b9e555724a4b99f227c1007\\\/384_237_2085_1251\\\/master\\\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863\",\"keywords\":[\"headline,hacker,government,phone,russia,cyberwar,spyware,apple\"],\"articleSection\":[\"CyberSecurity Blogs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/\",\"name\":\"Exiled Russian Journalist Hacked Using NSO Group Spyware 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i.guim.co.uk\\\/img\\\/media\\\/fb5fa1534df97ae83b9e555724a4b99f227c1007\\\/384_237_2085_1251\\\/master\\\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863\",\"datePublished\":\"2023-09-14T13:13:15+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i.guim.co.uk\\\/img\\\/media\\\/fb5fa1534df97ae83b9e555724a4b99f227c1007\\\/384_237_2085_1251\\\/master\\\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863\",\"contentUrl\":\"https:\\\/\\\/i.guim.co.uk\\\/img\\\/media\\\/fb5fa1534df97ae83b9e555724a4b99f227c1007\\\/384_237_2085_1251\\\/master\\\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/exiled-russian-journalist-hacked-using-nso-group-spyware\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,hacker,government,phone,russia,cyberwar,spyware,apple\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinehackergovernmentphonerussiacyberwarspywareapple\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Exiled Russian Journalist Hacked Using NSO Group Spyware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Exiled Russian Journalist Hacked Using NSO Group Spyware 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/","og_locale":"en_US","og_type":"article","og_title":"Exiled Russian Journalist Hacked Using NSO Group Spyware 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2023-09-14T13:13:15+00:00","og_image":[{"url":"https:\/\/i.guim.co.uk\/img\/media\/fb5fa1534df97ae83b9e555724a4b99f227c1007\/384_237_2085_1251\/master\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Exiled Russian Journalist Hacked Using NSO Group Spyware","datePublished":"2023-09-14T13:13:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/"},"wordCount":1052,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/#primaryimage"},"thumbnailUrl":"https:\/\/i.guim.co.uk\/img\/media\/fb5fa1534df97ae83b9e555724a4b99f227c1007\/384_237_2085_1251\/master\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863","keywords":["headline,hacker,government,phone,russia,cyberwar,spyware,apple"],"articleSection":["CyberSecurity Blogs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/","url":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/","name":"Exiled Russian Journalist Hacked Using NSO Group Spyware 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/#primaryimage"},"thumbnailUrl":"https:\/\/i.guim.co.uk\/img\/media\/fb5fa1534df97ae83b9e555724a4b99f227c1007\/384_237_2085_1251\/master\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863","datePublished":"2023-09-14T13:13:15+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/#primaryimage","url":"https:\/\/i.guim.co.uk\/img\/media\/fb5fa1534df97ae83b9e555724a4b99f227c1007\/384_237_2085_1251\/master\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863","contentUrl":"https:\/\/i.guim.co.uk\/img\/media\/fb5fa1534df97ae83b9e555724a4b99f227c1007\/384_237_2085_1251\/master\/2085.jpg?width=1200&amp;height=630&amp;quality=85&amp;auto=format&amp;fit=crop&amp;overlay-align=bottom%2Cleft&amp;overlay-width=100p&amp;overlay-base64=L2ltZy9zdGF0aWMvb3ZlcmxheXMvdGctZGVmYXVsdC5wbmc&amp;enable=upscale&amp;s=5d26f170c1b4f950ab5328d04c1bc863"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/exiled-russian-journalist-hacked-using-nso-group-spyware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,hacker,government,phone,russia,cyberwar,spyware,apple","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinehackergovernmentphonerussiacyberwarspywareapple\/"},{"@type":"ListItem","position":3,"name":"Exiled Russian Journalist Hacked Using NSO Group Spyware"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/53679","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=53679"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/53679\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=53679"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=53679"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=53679"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}