Fellow @CitizenLab. I like to build things. In love with the world, humanity, and its diversity. Formerly Growth, Business & Partnerships @Telegram & @WhatsApp.
Palo Alto, CA
Joined April 2008
- Tweets15.1K
- Following3.1K
- Followers7.8K
- Likes15.8K
Elies Campo retweeted
Together with @saskiabricmont and 33 other MEPs from 5 political groups, we urge @Europarl_EN, @EU_Commission, and @EUCouncil to investigate their exposure to zero-click spyware.
More in our letter:
1/2
Elies Campo retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Elies Campo retweeted
El 'Tàndem' se'n va de viatge! 🚲👝
‘Barcelona Moderna, de Gaudí a Picasso’ arribarà a la #KunsthalleMünchen aquesta tardor amb la col·laboració especial del #MNAC, que hi ha contribuït amb el préstec de 21 obres, fet que suposa la internacionalització d’artistes catalans.
Elies Campo retweeted
One elegant way to do this is through EEZ. The idea is to define a stateless L2 chain. You simply make static calls to this chain, and all the calls are proven within an EEZ proof.
Another interesting application is to start a transaction on L2, verify the signature there, and then execute the call on L1. L2 can handle computationally expensive operations, such as post-quantum signature verification.
@eduadiez will explain this at #Devcon!
@etheconomiczone
Elies Campo retweeted
LaLiga anti-piracy strategy so far:
1⃣ Block Cloudflare, breaking half a million unrelated websites, including banking apps.
2⃣ Put Proton VPN on a piracy watch list over blogs neither we nor our affiliates wrote.
➡️ Next up: banning WiFi because pubs use it to show the match.
LaLiga wants the EU to put major VPN providers including NordVPN, ProtonVPN, ExpressVPN and Surfshark on its piracy watch list.
The league argues that some VPN companies promote their services through affiliate websites that tell users how to bypass geo-blocks and access pirated sports streams.
Whether the EU agrees is another question
torrentfreak.com/laliga-want…
Elies Campo retweeted
Just how big was the Israeli “zero-click” malware attack?
@citizenlab researcher @billmarczak tells me, “The ads were at an enormous scale…hundreds of millions of impressions, meaning hundreds of millions of these ads were shown on devices over a period of a few months…even devices that don't get hacked, that aren't the quote, unquote real targets, there is still quite a bit of invasive data collection from those devices. So we're talking on the order of millions and millions of devices.”
Elies Campo retweeted
Thread 🧵
1/ NEW REPORT: Billions of advertising auctions determine in real time which ads we see on websites and in apps every day. Our latest research shows how the same data fueling this advertising ecosystem is being used to profile millions of users and silently infect targets with zero-click mercenary spyware, a novel attack technique we call "Adfection.”
Read the report: citizenlab.ca/research/how-d…
Elies Campo retweeted
NEW @citizenlab report We uncovered an Israeli firm using online ads to run vast spy operation
This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads.
45 devices at @AJEnglish confirmed infected
citizenlab.ca/research/how-d…
Elies Campo retweeted
🚨🇪🇺 European institutions exposed to zero-click #spyware attacks
This is a hybrid attack on Europe’s security.
We need urgent investigation into possible exposure across EU institutions.
The Commission must finally act on our PEGA recommendations. 1/4
citizenlab.ca/research/expos…
Elies Campo retweeted
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads.
A normal-looking ad loads. If you're a target, you're infected. No click needed.
To protect yourself, block ads now.
First time it's been confirmed in the wild. We call it #AdFection.
Candiru spyware infections at @AJEnglish. 45+ devices infected.
Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse.
Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC.
Investigation ongoing 1/
READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : citizenlab.ca/research/how-d…
Confiant's blog: blog.confiant.com/p/adint-we…
Elies Campo retweeted
🧵 1/3 Vocdoni is part of @OctantApp Epoch 13, the Privacy Round, and the allocation window opens today.
This is a another real chance for @ethereum to show it's useful to people, not only to speculators.
Private, verifiable voting is one place it can, and we're doing it with DAVINCI.vote: private, receipt-free and verifiable voting as an open-source public good!
Support us until 21 Oct:
epoch.octant.app/rounds/0x57…
Elies Campo retweeted
What a wonderful lineup is crafting within our pre-@mozillafestival meetup in Barcelona, 27 Oct, La Cinetika.
We are creating space of knowledge exchange between local & global digital rights activists. People working on alternative social media, messaging protocols against Big Tech, who won cases against Palantir, teach activists digital security practices, advocate for hacktivist culture.
🇧🇷 @Isa Executive Director @torproject
🇺🇸 Kay Coghill , PhD - Head of Community BlackSky algorithms kalyncoghill.com x blackskyweb.xyz
🇻🇪 Valentina Aguana Villegas - digital security for activists; Conexión Segura y Libre and Bellingcat, @mozilla Fellow mozillafoundation.org/en/mee…
🇩🇪 @MairJulian - Phoenix R&D, Air Messager air.ms/ - no phone number or email private messaging based on in-house MLS Encryption
@jordipainan - catalan-born protocol for private voting with 200.000 votes processed across unions, coops: @vocdoni , @davinci_vote
🇺🇸 @tessalaprofessa x @germnetwork - co-founder
atproto native end-to-end encrypted messenger
🇩🇪Eric Bear - Dash Chat Lead
dashchat.org - offline-first, encrypted, peer-to-peer messaging
🇨🇿 @TMIYChao x @BordelWTF - hacktivist & Bordel hacklab co-founder from Prague
🇺🇦 @nicksvyaznoy x @web3privacy - grassroots W3PN collective co-founder 🇺🇦
against all authorities: luma.com/mmfpumzi
Elies Campo retweeted
European cops bought this phone-cracking tech for years
Turns out it was secretly 🇷🇺Russian, managed from Russia by a team servicing the FSB!
There were clear warning signs. Dissidents & civil society warned about Oxygen Forensics.
It didn't matter, and police in....
🇩🇪 Germany
🇪🇸 Spain
🇮🇹 Italy
🇵🇱 Poland
🇱🇻Latvia (bought just this Month!)
🇭🇺 Hungary
🇷🇴 Romania
...kept buying.
Even the European Commission was listed as a client.
Well, the US just arrested the CEO & seized the website.
BIG PICTURE:
As spyware researchers, we've warned that European countries aren't properly vetting the phone hacking companies they use.
The national security risks are blindingly obvious.
Will Europe start paying attention to the danger now?
Story by @AntoanetaRoussi
politico.eu/article/russia-t…
Elies Campo retweeted
Thread 🧵
1/ 🚨 NEW RESEARCH: We identified a training program provided to government employees in Angola by the Israeli influence-for-hire company BlackCore.
Full report: citizenlab.ca/research/black…
Elies Campo retweeted
Nothing can shut down open source. But you can shut down the people who write it.
Roman Storm(me) was convicted over a protocol he doesn't control and transactions he never touched. The jury deadlocked on the two serious counts. DOJ is retrying him anyway, in 2027, four years after the indictment.
Michael Lewellen (@LewellenMichael) tried to do it the right way. Before publishing a non-custodial crowdfunding protocol, he asked a federal court whether writing that code made him an unlicensed money transmitter. In March a judge threw the case out, not on the merits, but because Lewellen hadn't shown a "credible threat of prosecution." DOJ was prosecuting another developer for that exact conduct at the time.
So you can't ask permission. You can only find out at sentencing.
The result is visible: shelved projects, teams moving offshore, protocols blocking U.S. users. Repos don't go to prison. Maintainers do.
Elies Campo retweeted
BREAKING: 29 European Parliament members just signed an open letter on #Serbia spyware abuses.👇
Call for immediate action & no EU money for Serbia's bid to join EU until rule of law returns.
Elies Campo retweeted
Students and opposition activists targeted with spyware in Serbia ft.trib.al/gQmbxzQ
Elies Campo retweeted
NEW INVESTIGATION: Serbia's pro-democracy movement hit with spyware in runup to 2026 elections.
📱iPhone: Newly confirmed Pegasus zero-click
🤖Android: Stealthier NoviSpy
+ Wave of Apple mercenary spyware notifications.
14+ targets already IDd: students, activists, opposition MP, etc.
Investigation ongoing. 1/
By @ShareConference w/forensic support from us @citizenlab & @AmnestyTech
sharefoundation.info/en/shar…
Elies Campo retweeted
“Less than 3 hours of hammock sleep and a wild night climbing the Montserrat mountain, we captured this incredible lunar eclipse in one shot!”
📷 Sony a7r M3 | 400mm | ƒ/6.3 | 1/3s | ISO 8000
👉 Photo by Cristina Uroz.
📍 Planned with PhotoPills: photopills.com
