Robuta

Jun 23, 2025 - On June 29 at REcon, Citizen Lab senior researcher Bill Marczak and co-presenter Daniel Roethlisberger will recount how they discovered a Pegasus exploit...

Jul 8, 2017 - In the past 24 hours The Citizen Lab has identified a maliciously repackaged copy of the popular circumvention software Psiphon 3. This post describes the...

Alberto Fittarelli is a senior researcher at the Citizen Lab specializing in disinformation research. He has over 15 years of experience investigating digital...

Sep 13, 2024 - The Citizen Lab has sent an open letter to the Ministers of Foreign Affairs of both Canada and Chile, as co-chairs of the Equal Rights Coalition (ERC), and Mr....

Apr 24, 2025 - A sustained, coordinated social media harassment and doxxing campaign – which we codenamed JUICYJAM – targeting the pro-democracy movement in Thailand has...

May 8, 2020 - Documents stolen from a prominent journalist and critic of the Russian government were manipulated and then released as a “leak” to discredit domestic and...

Dec 12, 2024 - Arwa – who spent over a decade in public activism work in Yemen – played a crucial role in the 2011 Yemeni uprising. She attended protests, spoke at

Jan 10, 2025 - We discovered over 60,000 unique censorship rules used to partially or totally censor search results across eight China-accessible search platforms analyzed....

Feb 2, 2021 - This report examines algorithmic technologies that are designed for use in criminal law enforcement systems, including a human rights and constitutional law...

Oct 27, 2020 - This is the first documented case of one-click mobile exploits used to target Tibetan groups, and reflects an escalation in the sophistication of digital...

The Citizen Lab is an interdisciplinary research unit at the Munk School of Global Affairs & Public Policy, University of Toronto. We apply our collective...

Sep 1, 2020 - The Tibetan community is being targeted by email-based malware attacks that leverage the March 10 Tibetan Uprising anniversary as a theme.

Aug 26, 2020 - This report is the third in a series which analyzes regionally-based keyword censorship in LINE, a mobile messaging application developed by LINE Corporation....

Jun 24, 2020 - In this report, we confirm the use of the services of Canadian company Netsweeper, Inc. to censor access to the Internet in the Kingdom of Bahrain.

Aug 26, 2020 - Report on DNS tampering and HTTP filtering of LINE and KakaoTalk in China.

Jan 10, 2025 - This report examines the accessibility of certain types of content on VK (an abbreviation for “VKontakte”), a Russian social networking service, in Canada,...

The Globe and Mail feature examines the Citizen Lab work and the recent Ghostnet investigation.

Jul 19, 2017 - This report describes a campaign of targeted spyware attacks carried out by a sophisticated operator, which we call Stealth Falcon. The attacks have been...

Citizen Lab Director Ron Deibert was interviewed by Patrick McGuire, the managing editor for VICE Canada on 7 May.

Jan 24, 2025 - We analyze the system Amazon deploys on the US “amazon.com” storefront to restrict shipments of certain products to specific regions. We found 17,050...

Mar 12, 2019

May 13, 2024 - Findings from this study underscore that online and offline threats should not be viewed as separate phenomena, but rather as overlapping and mutually...

Nov 2, 2021 - The Citizen Lab, OutRight Action International, and the Open Observatory of Network Interference (OONI) collaborated to conduct research on LGBTIQ website...

The Citizen Science Lab is a nonprofit hands-on laboratory where inquisitive minds and science-enthusiasts can explore the life sciences.

Examining social bias, transparency, and accountability issues associated with artificial intelligence (AI) systems.

Citizen Lab Director Ron Deibert has authored a piece in JustSecurity on the FBI's report on the Russian hacking of the Democratic National Convention (DNC)....

Nov 20, 2025 - Join us for a timely conversation on how digital repression and surveillance are reshaping women’s participation in peacebuilding and the Women, Peace and...

Jun 24, 2020 - This report reveals a campaign of reconnaissance, phishing, and malware operations that use content and domains made to mimic Chinese language news websites.

Mar 12, 2019 - Cyber Stewards Network Partner ICT Watch is one of 18 Indonesian organizations nominated for a World Summit for the Information Society (WSIS) prize in 2017....

The project team continued meeting with elected officials and local actors in the targeted communes

Dec 11, 2018 - We are writing to ask you to ensure that Google drops Project Dragonfly and any plans to launch a censored search app in China, and to re-affirm the...

Sep 1, 2020 - This brief describes malware ("GLASSES") sent in 2010 that is a simple downloader closely related to malware described by Mandiant in their APT1...

Apr 5, 2019 - Former Citizen Lab postdoctoral researcher Phillipa Gill has been named on the the "Top Innovators Under 35" by MIT Technology Review.

Jun 24, 2020 - Investigation of a malware campaign targeting the Tibetan community and discussion of the challenges in analyzing closed espionage ecosystems.

Aug 15, 2022 - While analyzing the phone of a Saudi activist infected with NSO Group’s Pegasus spyware, we discovered a zero-day zero-click exploit against iMessage. The...

The submission reviews Citizen Lab research on the use of private surveillance technology against human rights actors, describes some of the common practices...

Citizen Lab Research Manager Masashi Crete-Nishihata participated at the Seoul International Media Conference, which took place from 22-24 June 2012 at Yonsei...

John Scott-Railton is a leading expert on spyware, phishing, and information operations, with a global reputation for exposing sophisticated threats. As Senior...

Jun 23, 2020 - In this research note, we analyze a malware campaign targeting Hong Kong democracy activists. Two new malware families are used in the campaign that we name...

Nov 10, 2021 - An investigation revealing that Mexican soda tax supporters were targeted with NSO Group's government-exclusive spyware and exploit framework.

Feb 3, 2025 - The IATA Travel Pass (ITP), a global, opt-in app to receive, store, and share digital COVID-19 test certificates for flights, has a critical flaw in its...

Nov 21, 2024 - We conducted the first analysis of WeChat’s tracking ecosystem. Using reverse engineering methods to intercept WeChat’s network requests, we identified...