Full Breakdown
Targeted Surveillance: Teixeira Cândido and the Predator Spyware Incident in Angola
2/18/2026, 6:15:16 AM
Overview of the Incident
In May 2024, Teixeira Cândido, a prominent Angolan journalist and former Secretary General of the Syndicate of Angolan Journalists, had his iPhone compromised by Predator spyware developed by the Intellexa Consortium. This incident marks the first confirmed use of Predator spyware in Angola, as reported by Amnesty International. The attack began with a series of malicious WhatsApp messages sent to Cândido, leading to the successful installation of the spyware on May 4, 2024.
The Mechanics of the Attack
Cândido received multiple WhatsApp messages from an unknown sender posing as a student interested in discussing socioeconomic issues. After engaging with these messages, he inadvertently clicked on a malicious link, which allowed the spyware to infect his device. Forensic analysis by Amnesty International confirmed that the spyware was operational on his phone, granting attackers unrestricted access to his personal data, including messages, photos, and microphone audio. The spyware was removed after a reboot, indicating it lacked persistence on the device.
Context of Surveillance in Angola
The incident occurs within a broader context of increasing repression under President João Lourenço's administration, characterized by a tightening grip on press freedom and civil liberties. Cândido has faced various forms of intimidation since 2022, including break-ins at his office. The use of Predator spyware reflects a disturbing trend of surveillance targeting journalists and activists in Angola, where laws have increasingly restricted freedom of expression.
Official Statements & Responses
Cândido expressed his feelings of vulnerability, stating, “I feel exposed, as if I were taking a shower with the bathroom door wide open.” He emphasized the need for accountability, urging for clarity on who commissioned the spyware attack. Amnesty International has called the use of such invasive technology a grave violation of privacy and freedom of expression, highlighting its chilling effect on journalistic work.
Criticism & Opposition
Despite the evidence of spyware use, Amnesty International could not attribute the attack to a specific government entity. Critics argue that the lack of accountability for surveillance abuses allows such practices to continue unchecked. The U.S. government had previously sanctioned Intellexa and its executives for their involvement in privacy violations, yet questions remain regarding the effectiveness of these sanctions, especially after some were lifted in December 2025.
Conflicting Reports & Gaps
While Amnesty International confirmed the use of Predator spyware in this case, the organization has not identified the specific government customer responsible for the attack. Additionally, there is ongoing debate regarding the extent of Intellexa's operations and the effectiveness of international sanctions against the company.
What's Next
The incident has prompted calls for greater international scrutiny of surveillance technologies and their implications for human rights. Cândido advocates for a united front against such abuses, emphasizing the need for global awareness and action to protect press freedom. As Angola approaches elections in August 2027, the implications of this surveillance incident could resonate deeply within the country's civil society.
Verbatim Quotes
- “I feel naked knowing that I was the target of this invasion of my privacy.” — Teixeira Cândido, Journalist
- “Surveillance ultimately threatens our professional activity.” — Teixeira Cândido, Journalist
- “This type of highly invasive spyware is fundamentally incompatible with human rights.” — Amnesty International Report
This case underscores the urgent need for robust protections against the misuse of surveillance technologies, particularly in environments where press freedom is under threat.
