Angola: Journalist Targeted with Predator Spyware – Amnesty International Investigation

by Chief Editor

Angola’s Journalist Under Surveillance: A Growing Global Threat

Amnesty International’s recent investigation confirms what many fear: the increasingly pervasive apply of spyware like Predator to target journalists and activists. In Angola, prominent journalist Teixeira Cândido was compromised in 2024, marking the first forensic confirmation of Predator’s use within the country. This case isn’t isolated; it’s part of a disturbing trend of digital attacks on those holding power accountable.

Predator Spyware: A Deep Dive into the Technology

Developed by Intellexa, Predator is a highly invasive mobile phone spyware designed for government surveillance. Unlike some other spyware, Predator’s continued operation even after public exposure, criminal investigations and sanctions is particularly concerning. The spyware can access virtually all data on a target’s device – encrypted messages, audio recordings, location data, photos, and even activate the microphone – all while leaving minimal traces.

Prominent Angolan journalist, jurist and press freedom activist, Teixeira Cândido

The Human Cost: Teixeira Cândido’s Experience

“I feel naked knowing that I was the target of this invasion of my privacy,” Teixeira Cândido stated. His experience highlights the chilling effect such surveillance has on journalistic work. He now limits his communication on personal devices, fearing further compromise. The attack began with seemingly innocuous WhatsApp messages, luring him to click malicious links disguised as news articles.

Beyond Angola: A Global Pattern of Abuse

The targeting of Cândido coincides with a confirmed attack on a human rights lawyer in Pakistan’s Balochistan province in 2025. This demonstrates Intellexa’s spyware remains operational in multiple, currently unknown jurisdictions. Amnesty International’s broader investigation, alongside Inside Story, Haaretz, and WAV Research Collective, revealed further abuses through the “Intellexa Leaks” in December 2025.

Authoritarian Trends and Surveillance

This attack occurs within a broader context of increasing authoritarianism in Angola under President João Lourenço’s administration. Amnesty International reports a pattern of repression, including the suppression of protests, arbitrary arrests, and abuses in detention. The use of spyware is a further escalation of these tactics.

What’s Next? Potential Future Trends

The continued use of Predator, despite scrutiny, suggests several potential future trends:

  • Proliferation of Similar Technologies: People can expect to see other mercenary spyware companies emerge, offering similar capabilities to governments.
  • Sophisticated Attack Vectors: Attackers will likely refine their techniques, making it even harder to detect and prevent spyware infections. The use of social engineering, like the WhatsApp attack on Cândido, will become more common.
  • Increased Focus on Encryption Circumvention: Spyware developers will prioritize breaking end-to-end encryption to access sensitive communications.
  • Blurring Lines Between State and Private Actors: The involvement of private companies in surveillance raises questions about accountability and oversight.
  • Geopolitical Implications: The use of spyware could become a tool for geopolitical competition, with states targeting journalists and activists in rival countries.

“Forensic analysis conducted by Amnesty International’s Security Lab confirmed with high confidence that the infection links are tied to Intellexa’s Predator spyware and resulted in at least one successful infection of Teixeira Cândido’s phone.”

Carolina Rocha da Silva, Operations Manager at Amnesty International’s Security Lab

FAQ: Understanding the Threat

  • What is Predator spyware? Predator is a highly invasive mobile phone spyware developed by Intellexa for government surveillance.
  • How does Predator infect a phone? It’s often delivered through malicious links sent via messaging apps like WhatsApp.
  • What data can Predator access? Virtually all data on a phone, including messages, calls, location, photos, and audio recordings.
  • Who is behind Predator? Intellexa, a mercenary spyware company.

Amnesty International has contacted Intellexa seeking information about its human rights due diligence processes, but has yet to receive a response.

Pro Tip: Regularly update your phone’s operating system and security software to patch vulnerabilities that spyware could exploit.

Do you have concerns about digital security? Share your thoughts in the comments below.

You may also like

Leave a Comment