This event is archived. Final snapshot from when the story concluded. View on Dashboard
Regulatory spyware infection

Angolan Journalist Teixeira Candido's Phone Infected by Cytrox Spyware

Analysis based on 7 articles · First reported Feb 18, 2026 · Last updated Feb 18, 2026

Sentiment
-20
Attention
2
Articles
7
Market Impact
Direct
Live prominence charts, article sentiment distribution, and event development timeline available on the NewsDesk Dashboard

The event highlights the ongoing risks of surveillance software to individuals and organizations, potentially increasing demand for cybersecurity solutions. It also underscores the reputational and legal challenges faced by companies like Cytrox involved in such activities.

Cybersecurity Journalism Technology

Angolan journalist Teixeira Candido's phone was infected with Cytrox's Predator spyware in May 2024 after he clicked a malicious link in a Meta Platforms===WhatsApp message. This incident, confirmed by Amnesty International, marks the first documented use of Predator in Angola. The spyware granted full access to Candido's phone content, raising significant privacy concerns. Cytrox has a history of privacy abuses and has faced sanctions from the United States government, although some executives were later removed from the sanctions list by the Trump administration. The event underscores the global issue of surveillance technology and its impact on journalists and public figures.

100 Cytrox infected phone with Predator spyware Teixeira Candido
80 Amnesty International published report on spyware infection
60 United States===United States Department of the Treasury sanctioned individuals associated with Cytrox Consortium Cytrox
40 Donald Trump removed Cytrox executives from sanctions list Cytrox
priv
Cytrox is the vendor of the Predator spyware used to infect Teixeira Candido's phone. The company has been linked to numerous privacy abuses and faced sanctions from the United States government, further damaging its reputation.
Importance 95 Sentiment -70
per
Teixeira Candido, a prominent Angolan journalist and head of the Syndicate of Angolan Journalists, had his phone infected with Cytrox's Predator spyware. This incident has made him feel exposed and raises concerns about the content accessed from his device.
Importance 90 Sentiment -50
ngo
Amnesty International published a report confirming the Predator spyware infection on Teixeira Candido's phone, marking the first confirmed case of its use in Angola. This report brings to light the ongoing issues with surveillance software.
Importance 70 Sentiment 10
cnt
Angola is the location where the Predator spyware was first confirmed to be used against a journalist, Teixeira Candido. This event highlights potential surveillance issues within the country.
Importance 60 Sentiment -10
cnt
The United States government previously sanctioned individuals associated with the Cytrox Consortium due to its invasive spyware products. The Trump administration later removed some executives from this list.
Importance 40 Sentiment 0
subs
Meta Platforms===WhatsApp was the platform used to deliver the malicious link that led to the Predator spyware infection on Teixeira Candido's phone. This highlights a vulnerability in its messaging service.
Importance 30 Sentiment -5
ngo
Teixeira Candido was the head of the Syndicate of Angolan Journalists when his phone was targeted. This incident affects the broader journalistic community in Angola.
Importance 20 Sentiment -10
+ 3 more entities View on Dashboard
NEWSDESK
Track this event live

Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.

Open Dashboard

About NewsDesk

NewsDesk is a news intelligence platform that converts raw news articles into structured data. It tracks events, entities, and the relationships between them, with sentiment and attention metrics derived from thousands of articles. Pages on this site are daily static snapshots from the platform's live database. For real-time tracking, search, and alerts, the full dashboard is at app.newsdesk.dev.