Introduction
A South Sudanese human rights activist, David Yambio, has been informed that his iPhone was targeted by spyware, raising significant concerns about surveillance of activists in Europe. Yambio, who is based in Italy, has been a vocal critic of the Italy-Libya migration agreements and has played a crucial role in documenting abuses against migrants in Libya. The attack on his device appears to be part of a broader pattern of spyware attacks against journalists and human rights defenders, particularly those critical of migration policies.
The incident underscores the growing risks faced by migrant rights activists and raises questions about the use of surveillance technology to suppress dissent. The Italian government has denied any involvement, but concerns remain about how such powerful spyware tools are being used against civil society actors.
Key Takeaways
- Spyware Attack on David Yambio: Apple notified Yambio in November 2024 that his phone had been targeted by a mercenary spyware attack, typically used to remotely compromise devices.
- Focus on Italy-Libya Migration Pact: Yambio has strongly opposed the agreements between Italy and Libya, arguing they facilitate the return of migrants to abusive detention centers.
- Testimony for the ICC: He has provided evidence to the International Criminal Court (ICC) on human rights violations, including abuses by the Libyan coastguard and militia groups.
- Wider Surveillance of Activists: At least 90 other individuals, including Italian journalists and activists, were also targeted by similar spyware attacks.
- Government Denials: The Italian government, led by Prime Minister Giorgia Meloni, denies involvement, though critics argue state agencies or third-party actors may be behind the operation.
Who is David Yambio?
David Yambio is a South Sudanese refugee and activist who co-founded the organization Refugees in Libya. His work focuses on documenting and exposing human rights abuses committed against migrants in Libya, particularly those intercepted by the Libyan coastguard, which operates with Italian and EU support.
Yambio’s activism stems from his own experience of detention and forced labor in Libya. He was intercepted while attempting to cross the Mediterranean to Europe and was detained in the infamous Mitiga prison, where migrants were subjected to violence, forced labor, and abuse. After escaping and reaching Italy in 2022, he began advocating for the protection of asylum seekers and legal accountability for crimes committed against them.
How Was Yambio Targeted?
On November 13, 2024, Apple informed Yambio that his phone had been targeted by sophisticated spyware. The attack was described as a mercenary spyware operation, meaning it was likely conducted by a state actor or a private entity working on behalf of a government.
- The spyware could allow attackers to access messages, emails, calls, and sensitive data.
- The notification stated that he was “targeted because of who you are and what you do”, indicating a political motivation behind the attack.
- Similar attacks have been carried out against other human rights defenders, journalists, and political dissidents worldwide.
Link to Italy’s Migration Policies
Yambio has been an outspoken critic of the Italy-Libya migration agreement, which enables the interception of migrant boats in the Mediterranean and their return to Libya. Human rights organizations have repeatedly condemned this policy, arguing that returning migrants to Libya exposes them to torture, sexual violence, forced labor, and extortion in detention centers.
- In early 2024, Yambio testified before the International Criminal Court (ICC) regarding crimes against migrants in Libyan detention centers.
- His evidence included documentation of abuses committed by Libyan authorities and militia groups, including Osama Najim, a police chief accused of war crimes.
- Yambio has described the Italy-Libya migration policy as “a death sentence for thousands of people”, holding European governments accountable for enabling such human rights violations.
Broader Pattern of Surveillance Against Activists
Yambio is not the only target of spyware attacks in Italy. Investigations have revealed that at least 90 individuals, including Italian journalists and activists, received similar notifications from Apple and WhatsApp in late January 2025.
✔ Paragon Solutions, an Israel-based cyber-intelligence company, was found to be behind some of the attacks. ✔ The company has since terminated contracts with Italy due to violations of terms of service, which prohibit targeting journalists and human rights defenders. ✔ The spyware was used against individuals critical of Italy’s migration policies and government decisions. ✔ Similar state-sponsored hacking tools, such as NSO Group’s Pegasus spyware, have been used in the past to monitor journalists and activists worldwide.
Government and Public Response
The Italian government has denied involvement in the spyware attack on Yambio and other activists. However, the incident has raised serious human rights and legal concerns.
✔ Official Government Position:
- The Prime Minister’s office stated that Italian intelligence agencies were not involved.
- However, some experts believe that state-aligned actors or third-party contractors may have been responsible.
✔ Response from Human Rights Groups:
- Organizations such as Amnesty International and Human Rights Watch have called for a full investigation into the attack.
- The European Parliament has demanded stricter regulations on spyware sales and usage, citing potential abuses against activists and dissidents.
✔ Public Backlash:
- Civil rights groups in Italy have condemned the potential misuse of surveillance technology, warning that such attacks threaten press freedom and democracy.
- Activists have urged the government to increase transparency about its use of spyware technologies.
Global Implications
This case is part of a broader international trend of governments and private actors using spyware against journalists, activists, and political opponents. Recent similar cases include:
- Spain (2023) – Catalan pro-independence leaders targeted by Pegasus spyware.
- France (2023) – Journalists investigating arms deals hacked with surveillance software.
- Saudi Arabia (2018) – Pegasus spyware used to monitor dissidents, including journalist Jamal Khashoggi, who was later assassinated.
The growing use of cyber-surveillance tools has led to calls for global regulations to prevent human rights abuses and the illegal tracking of activists.
Conclusion
The targeting of David Yambio with spyware is a deeply concerning development that highlights the risks faced by human rights defenders, journalists, and critics of government policies.
The incident has raised serious questions about:
✔ The misuse of surveillance technology against civil society actors. ✔ The lack of oversight in spyware deployment by governments and private firms. ✔ The need for stronger legal protections for activists and journalists against digital threats.
As scrutiny over the Italy-Libya migration agreements intensifies, this attack on Yambio underscores the ongoing struggles faced by those advocating for the rights of migrants and refugees.
#Italy #Spyware #HumanRights
Source – theguardian.com
