Follow
Yikes. https://www.amnesty.org/en/latest/research/2020/06/moroccan-journalist-targeted-with-network-injection-attacks-using-nso-groups-tools/
(A good argument to bring up with those who still insist we don't need full HTTPS?)
