Angolan Journalist Targeted with Spyware Seeks Justice & Accountability

Angolan Journalist Targeted with Spyware, Raising Fears for Press Freedom

Luanda, Angola – Angolan journalist and lawyer Teixeira Cândido is demanding accountability after discovering his phone was infected with Predator spyware, a commercially available tool capable of accessing a device’s microphone, camera, and personal data without the user’s knowledge. The attack, detailed in findings published by Amnesty International’s Security Lab, marks the first publicly known instance of spyware targeting in Angola, a country where restrictions on the press have reportedly tightened ahead of the August 2027 elections.

“we must seek to find out who the entities are that have acquired these spyware tools,” Cândido told the Committee to Protect Journalists (CPJ). The spyware was delivered via a malicious link sent through WhatsApp on May 3, 2024 – World Press Freedom Day – and installed on his phone the following day. While the infection lasted less than 24 hours, Cândido expressed a profound sense of violation.

“I literally felt naked! It’s as if someone I don’t know had stripped me naked in public. It’s like taking a shower with people watching. That’s how it feels,” Cândido said during an interview in Luanda. “I don’t know what kind of information they had access to. I don’t know to what extent they shared my intimate conversations.”

The experience resonated with Russian editor Galina Timchenko, who previously described a similar feeling of vulnerability after being targeted with Pegasus spyware.

According to Amnesty International, the WhatsApp message originated from someone claiming to represent Angolan students interested in discussing socioeconomic development. The sender used an Angolan phone number and a common Angolan name, attempting to establish credibility.

Predator is developed by the Intellexa Consortium, an international network of companies selling surveillance services. The consortium was founded by former Israeli military officer Tal Dilian, and was recently subject to U.S. Sanctions. However, some individuals linked to Intellexa were removed from the sanctions list in December 2025, a move that has raised concerns among human rights experts and lawmakers.

The attack on Cândido comes amid a broader trend of increasing restrictions on press freedom in Angola. Friends of Angola Executive Director Florindo Chivucute noted that a wave of “draconian laws” introduced during President João Lourenço’s second term have reversed progress made in establishing democratic institutions and guaranteeing freedoms.

CPJ has documented a history of Angolan authorities prosecuting journalists on criminal defamation and insult charges, as well as suspending broadcast licenses and engaging in other forms of harassment. Recent legislation, including the National Security Law passed in 2024, grants security organs broad powers to disrupt communications systems, while a law on vandalism criminalized the filming or photographing of security forces. While portions of the vandalism law have been deemed unconstitutional, concerns remain.

Currently, Angola’s parliament is considering two draft laws – one criminalizing the sharing of “false information” and another on cybersecurity that would expand surveillance powers with limited oversight. Cândido fears these laws will further stifle dissent and create a climate of fear.

“Surveillance ultimately threatens our professional activity. We must unite and create a large international network, even against states, if necessary, to raise awareness, because it must be possible to defend freedom,” Cândido told CPJ. “Otherwise, one day we will wake up and there will be no more journalism!”

While Cândido seeks accountability within Angola, he also calls for international support to uncover those responsible for the surveillance. The case highlights the growing threat spyware poses to journalists and the urgent need for governments to curb these attacks.