A Greek court has convicted four executives linked to Intellexa, a controversial spyware developer, for their involvement in the illegal wiretapping of prominent figures including government ministers, military officials and journalists. The landmark ruling, delivered on February 26, 2026, marks a significant moment in the ongoing scrutiny of the global spyware industry and its potential for abuse. The case centers around the use of Predator spyware, developed by Intellexa, to secretly monitor individuals within Greece.
Those convicted include Tal Dilian, the founder of Intellexa and a former commander in an elite Israeli intelligence unit; Sara Hamou, his ex-wife and business partner; Felix Bitzios, an Intellexa executive; and Yiannis Lavranos, the owner of the Greek security firm that purchased the Predator spyware. Each defendant received an eight-year prison sentence, suspended pending appeals, after being found guilty of breaching the confidentiality of telephone communications and illegally accessing information systems. This conviction represents the first time an executive at a mercenary spy company has been sentenced to prison, according to researchers at the University of Toronto’s Citizen Lab.
The ‘Predatorgate’ Scandal and its Origins
The convictions stem from a scandal that erupted in 2022, dubbed “Predatorgate” in Greece. Investigations revealed that the phones of at least 87 individuals were targeted with Intellexa’s Predator spyware. Among those targeted were the current leader of the main opposition party, a journalist investigating corruption within the Greek banking sector, and the editor of a leading national newspaper. The revelations prompted the resignations of the head of Greece’s intelligence agency and a senior aide to the prime minister, highlighting the political sensitivity of the case.
Intellexa’s spyware allows for covert access to a mobile device’s microphone, camera, contacts, and files, raising serious concerns about privacy and freedom of expression. The company has faced increasing scrutiny following reports, including those published as part of the Cyprus Confidential investigation, detailing its sales of spyware to regimes with questionable human rights records.
U.S. Sanctions and Continued Operations
In March and September 2024, the U.S. Government imposed sanctions on Dilian, Hamou, and Bitzios, citing their involvement with Intellexa and its predatory practices. Yet, sanctions against Hamou were lifted in late 2025. Despite these measures, the company continued to operate, and its spyware was reportedly used to hack the phone of Teixeira Cândido, a prominent Angolan journalist, in May 2024.
Cândido, an advocate for media freedom, described the experience as deeply unsettling. “I was scared, of course, because I didn’t grasp what content they took from my phone, from my emails, and I didn’t know what they had listened to,” he told the International Consortium of Investigative Journalists (ICIJ). “It feels like you’re walking naked and being watched.” The hack was discovered by Amnesty International’s Security Lab after Cândido sought their assistance following a burglary at the headquarters of the Syndicate of Angolan Journalists, which he previously led.
Expanding Business Interests and Global Reach
Amnesty International’s investigations have also revealed that Predator spyware was used to target a human rights lawyer in Pakistan during the summer of 2025. Several executives linked to Intellexa have established businesses in Portugal, including a skincare company founded by Hamou, demonstrating the company’s efforts to diversify its operations.
Intellexa’s client list reportedly includes entities accused of serious human rights abuses. The company has sold Predator spyware to Sudan’s Rapid Support Forces, whose actions in the ongoing civil war have been described by U.N. Experts as potentially constituting genocide. It has also supplied the spyware to the Egyptian intelligence services and the Vietnamese government, which allegedly used it to attempt to hack the devices of U.S. Officials.
What’s Next in the Case
The Greek court’s decision to share the trial record with judicial authorities could lead to further prosecutions related to the phone hacking scandal. According to the Greek daily Kathimerini, prosecutors believe there is evidence to support investigating potential espionage charges against the defendants and others involved. The outcome of any appeals will also be closely watched.
“What this shows is when all the facts of spyware companies’ business models get in front of a fair judge, consequences will follow,” said John Scott-Railton, a senior researcher at the University of Toronto’s Citizen Lab. The case serves as a stark reminder of the risks posed by the unregulated proliferation of spyware and the importance of holding those who misuse it accountable.
The Greek government has not yet commented on the verdict. Further updates on potential additional prosecutions and the outcome of any appeals are expected in the coming months. Readers can follow reporting on this developing story through ICIJ and Kathimerini.
If you or someone you know is experiencing digital security concerns, resources are available. Amnesty International’s Security Lab offers guidance and support: https://securitylab.amnesty.org/
