---
title: "Espionage: mobile devices are prime targets"
description: "The ENISA 2026 report describes espionage cases involving mobile devices: commercial spyware such as Pegasus and Graphite, and hijacked messaging apps."
image: https://blog.pradeo.com/hubfs/banner_1170x480-2.png
---
[](https://pradeo.com)
- Solutions
MOBILE DEVICE SECURITY - [Mobile Threat Defense](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/)
- [Secure Private Store](https://pradeo.com/en/solutions/mobile-device-security/secure-private-store/)
MOBILE APPLICATION SECURITY - [Mobile Application Compliance Audit](https://pradeo.com/en/solutions/mobile-application-security/application-compliance-audit/)
- [Runtime Application Self Protection](https://pradeo.com/en/solutions/mobile-application-security/rasp/)
- [Shielding](https://pradeo.com/en/solutions/mobile-application-security/application-shielding/)
- [Application Security Testing](https://pradeo.com/en/solutions/mobile-application-security/application-security-testing/)
- Use cases
- [Cybersecurity in MDM/ UEM](https://pradeo.com/en/use-cases/cybersecurity-in-mdm-uem/)
- [Securing mobile devices](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/)
- [Securing Mobile Applications](https://pradeo.com/en/solutions/mobile-application-security/application-security-testing/)
- [Malware / leakware protection](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/)
- [Phishing protection](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/)
- [Ensuring compliance for applications](https://pradeo.com/en/compliance/)
- [Ensuring compliance for mobile fleet](https://pradeo.com/en/compliance/)
- [Securing BYOD](https://pradeo.com/en/solutions/mobile-device-security/secure-private-store/)
- [Become partner](https://pradeo.com/become-partner/)
- Resources
- [Solution briefs](https://pradeo.com/en/resources/?solution-briefs)
- [Customer Cases](https://pradeo.com/en/resources/?customer-cases)
- [Integration briefs](https://pradeo.com/en/resources/?integration-briefs)
- [White Papers](https://pradeo.com/en/resources/?white-papers)
- [Analyst reports & guides](https://pradeo.com/en/resources/?analyst-reports-guides)
- [On demand webcast](https://pradeo.com/en/resources/?webcasts-on-demand)
- [About us](https://pradeo.com/en/about/)
- [Blog](https://blog.pradeo.com/)
- [Contact](https://pradeo.com/contact/)
- en
- [**FR**](https://blog.pradeo.com/fr)
- [**DE**](https://blog.pradeo.com/de)
### Topics
- Select a Topic
- [All](https://blog.pradeo.com)
- [Mobile Security](https://blog.pradeo.com/topic/mobile-security)
- [Mobile Application Security](https://blog.pradeo.com/topic/mobile-application-security)
- [Expertise](https://blog.pradeo.com/topic/expertise)
- [News](https://blog.pradeo.com/topic/news)
- [Security Alert](https://blog.pradeo.com/topic/security-alert)
- [Cybersecurity](https://blog.pradeo.com/topic/cybersecurity)
- [Partners](https://blog.pradeo.com/topic/partners)
- [Corporate](https://blog.pradeo.com/topic/corporate)
- [Events](https://blog.pradeo.com/topic/events)
- [Actualité](https://blog.pradeo.com/topic/actualité)
- [predictions](https://blog.pradeo.com/topic/predictions)
- [cyberattack](https://blog.pradeo.com/topic/cyberattack)
### Stay up to date
SUBSCRIBE TO OUR BLOG
### Stay up to date
[News](https://blog.pradeo.com/topic/news)
# Espionage: mobile devices are prime targets
By [Julie LAURENT](https://blog.pradeo.com/author/julie-laurent) on October, 29 2026
[mailto:?subject=Take%20a%20look%20at%20this%20article](mailto:?subject=Take%20a%20look%20at%20this%20article)
In 2025, the [ENISA Threat Landscape report](https://blog.pradeo.com/mobile-devices-leading-vector-of-cyberattacks-in-europe) ranked mobile as the leading attack vector, accounting for 42% of threats. [The 2026 edition](https://www.enisa.europa.eu/sites/default/files/2026-09/ENISA%20Threat%20Landscape%202026_Final.pdf) focuses on espionage, and once again, many cases involve the smartphone. Commercial spyware, hijacked messaging apps... these examples show that mobile threat vectors keep evolving.
## **Commercial spyware: businesses are targets too**
The public sector is the most targeted by espionage. According to ENISA, this sector is a prime target because it provides access to strategic data on political positions, foreign relations, defence and security. Nearly three in ten espionage cases recorded in Europe target this sector (29.4%).
Many of these espionage cases go through mobile devices. A European government official was infected with the Pegasus spyware, and the [Graphite](https://blog.pradeo.com/graphite-spyware-a-new-case-of-mobile-espionage)spyware targeted European journalists and activists via WhatsApp and then iMessage.
The report also mentions DCHSpy, an Android spyware whose new version was used by the Iran-linked group MuddyWater in the context of the Twelve-Day War between Israel and Iran.
But mobile espionage is not limited to the public sector. Commercial spyware, intrusion tools developed by private companies and sold to governments, also affects the business world. Pegasus infections were identified in the Czech Republic, Poland and Spain among logistics and finance professionals. ENISA also reports that the Graphite spyware was allegedly used against a banking executive.
When a professional’s phone is compromised, their messages, documents and access to work tools are exposed, and with them, the company’s data.
## **Messaging apps hijacked to gain targets’ trust**
ENISA highlights another notable trend: the growing abuse of messaging applications. Large-scale campaigns have used Signal or WhatsApp to establish personalised contact with their targets.
In March 2026, [the FBI and CISA](https://www.ic3.gov/PSA/2026/PSA260320) warned of a campaign by groups linked to Russian intelligence targeting the messaging accounts of government officials and journalists, including on Signal. The attackers posed as the app’s support team and pushed victims to scan a QR code or approve the linking of a new device, so they could then read their messages. [Another phishing campaign](https://blog.pradeo.com/signal-a-phishing-campaign-targets-users-backups), in May 2026, targeted Signal backup recovery keys.
In its conclusion, the ENISA Threat Landscape 2026 report describes social engineering that increasingly relies on these trusted communication platforms. No spyware is needed to access sensitive conversations: a message that looks legitimate can be enough. And these campaigns are not isolated. A work device receives an average of [288 phishing attempts](https://pradeo.com/en/form/mobile-security-report-2026/) per year, and 45% of users click on the links they receive.
## **Mobile espionage: four recommendations to limit the risk**
To limit the risk of mobile attacks, [the FBI and CISA,](https://www.ic3.gov/PSA/2026/PSA260320) as well as [Google](https://cloud.google.com/blog/topics/threat-intelligence/russia-targeting-signal-messenger), recommend several practices:
- Never share a verification code, PIN or recovery key, even with someone claiming to be support.
- Do not scan a QR code or approve the linking of a new device unless you requested it.
- Regularly check the devices linked to messaging apps such as Signal and WhatsApp, and remove any you do not recognise.
- Keep the operating system and apps up to date, as spyware can exploit security vulnerabilities.
These recommendations reduce exposure, but they rely on each user’s vigilance.
## **How Pradeo protects professional mobile use**
As attacks grow increasingly sophisticated, vigilance alone is not enough. [Pradeo Mobile Threat Defense](https://pradeo.com/en/solutions/mobile-device-security/mobile-threat-defense/) secures mobile fleets with real-time protection against all threat vectors.
Pradeo’s mobile fleet protection solution:
- Detects and blocks malicious applications, as well as intrusive applications that access data unrelated to their declared purpose
- Analyses links received by SMS, email, messaging apps or QR code to block phishing attempts
- Protects against network threats and verifies the integrity of mobile devices
Pradeo also enables organisations to stay in control of their mobile data, thanks to a technology entirely designed and hosted in Europe, beyond the reach of extraterritorial legislation.
###### About The Author
[More from this author](https://blog.pradeo.com/author/julie-laurent)
###### Julie LAURENT
#### Recommended articles
[-1.png)](https://blog.pradeo.com/data-control-why-hosting-your-data-locally-isnt-enough)
###### [Data control: why hosting your data locally isn't enough](https://blog.pradeo.com/data-control-why-hosting-your-data-locally-isnt-enough)
\- October 8, 2026
[.png)](https://blog.pradeo.com/fence-integrates-pradeos-technology-to-secure-its-clients-mobile-fleets-1)
###### [Fence integrates Pradeo's technology to secure its clients' mobile fleets](https://blog.pradeo.com/fence-integrates-pradeos-technology-to-secure-its-clients-mobile-fleets-1)
\- September 1, 2026
### Popular articles
### Stay up to date
### Recent articles
### Articles récents
[Espionage: mobile devices are prime targets](https://blog.pradeo.com/espionage-mobile-devices-are-prime-targets)
\- 29 October, 2026
[Shizuku, the legitimate tool that gives malware access to Android](https://blog.pradeo.com/shizuku-the-legitimate-tool-that-gives-malware-access-to-android)
\- 29 October, 2026
[Data control: why hosting your data locally isn't enough](https://blog.pradeo.com/data-control-why-hosting-your-data-locally-isnt-enough)
\- 29 October, 2026
[Fence integrates Pradeo's technology to secure its clients' mobile fleets](https://blog.pradeo.com/fence-integrates-pradeos-technology-to-secure-its-clients-mobile-fleets-1)
\- 29 October, 2026
[RedHook: the banking trojan that grants itself system-level access on Android](https://blog.pradeo.com/redhook-the-banking-trojan-that-grants-itself-system-level-access-on-android)
\- 29 October, 2026
### Topics
- [Mobile Security (56)](https://blog.pradeo.com/topic/mobile-security)
- [Mobile Application Security (46)](https://blog.pradeo.com/topic/mobile-application-security)
- [Expertise (32)](https://blog.pradeo.com/topic/expertise)
- [News (30)](https://blog.pradeo.com/topic/news)
- [Security Alert (30)](https://blog.pradeo.com/topic/security-alert)
- [Cybersecurity (29)](https://blog.pradeo.com/topic/cybersecurity)
- [Partners (25)](https://blog.pradeo.com/topic/partners)
- [Corporate (12)](https://blog.pradeo.com/topic/corporate)
- [Events (4)](https://blog.pradeo.com/topic/events)
- [Actualité (2)](https://blog.pradeo.com/topic/actualité)
- [predictions (2)](https://blog.pradeo.com/topic/predictions)
- [cyberattack (1)](https://blog.pradeo.com/topic/cyberattack)
see all
[](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/2378615/ad3111b0-9454-41ff-91f4-9eee95b1f08f)
### Get in touch with mobile security experts
[Contact us](https://www.pradeo.com/en-US/contact-us)
[](https://pradeo.com)
European leader in mobile security, Pradeo protects business mobile devices and applications.
[Read More](https://www.pradeo.com/en-US/)
- [Resources](https://www.pradeo.com/en-US/pradeo-ressources#white_papers)
- [UEM security](https://www.pradeo.com/en-US/uem-mdm-security)
- [Use cases](https://www.pradeo.com/en-US/pradeo-ressources#use-case)
- [Data protection](https://www.pradeo.com/en-US/mobile-data-privacy-regulation)
- [Contact us](https://www.pradeo.com/en-US/contact-us)
- [Mobile Threat Defense](https://www.pradeo.com/en-US/mobile-threat-defense)
- [Mobile Application Security Testing](https://www.pradeo.com/en-US/application-security-testing)
- [In-App Protection](https://www.pradeo.com/en-US/in-app-protection)
- [Secure Private Store](https://www.pradeo.com/en-US/private-app-store)
- [Mobile Threat Intelligence](https://www.pradeo.com/en-US/mobile-threat-intelligence#perso-threat-intelligence)
[contact@pradeo.com](mailto:contact@pradeo.com)
Copyright @ 2022. All Right Reserved.
-
-
-
```json
{
"@context" : "http://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Julie LAURENT"
},
"dateModified" : "October 29, 2026, 1:35:17 PM",
"datePublished" : "2026-10-29 13:35:17",
"description" : "The ENISA 2026 report describes espionage cases involving mobile devices: commercial spyware such as Pegasus and Graphite, and hijacked messaging apps.",
"headline" : "Espionage: mobile devices are prime targets",
"image" : {
"@type" : "ImageObject",
"url" : "https://2378615.fs1.hubspotusercontent-eu1.net/hubfs/2378615/banner_1170x480-2.png"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://2378615.fs1.hubspotusercontent-eu1.net/hubfs/2378615/Logo%20Pradeo%20D%C3%A9grad%C3%A9%20Long%20Couleurs.svg"
},
"name" : "Pradeo"
}
}
```