Third-party resellers, exploit brokers, and contractors are fueling the global expansion of the commercial spyware market by obscuring supply chains and helping buyers circumvent export controls and trade bans. A new Atlantic Council report highlights how intermediaries act as the operational backbone of the spyware ecosystem, making it harder for governments and researchers to track the flow of surveillance tools. In 2025, commercial surveillance vendors surpassed state-sponsored groups in zero-day exploit attribution for the first time. Regulatory efforts like the Pall Mall Process remain ongoing, and experts recommend Know Your Vendor requirements, broker certification, and improved registries to improve transparency.
Sort: