Spy vs. Spy: Mercenary Spyware Targets the Developers Who Build It

Developers of Mercenary spyware say they were targeted themselves, with developer Jay Gibson recounting how Apple notified him his iPhone had been the target of a state‑sponsored spyware operation. Gibson, who specialises in discovering zero‑day vulnerabilities in iOS and turning them into exploit frameworks, works in a field closely connected to tools used by government hacking outfits, including Trenchant, a Western manufacturer of such capabilities.

According to TechCrunch, Gibson was unaware that he would become a target, and after the warning he shut down all his devices and bought new ones, while seeking assistance from a digital forensics firm. The investigation showed that such attacks typically exploit zero‑day vulnerabilities and implant payloads through stealthy infection methods, but Gibson declined to provide his full backups, limiting forensic access.

In the months preceding the alert, Gibson had been suspended by Trenchant over accusations of double employment, and soon after his employment was terminated with a settlement offered but not disclosed, leaving no definitive evidence that he had engaged in any leakage. 22 October 2025