The Zero-Click Marketplace: An Analysis of the Commercial Spyware Ecosystem and its Geopolitical Implications

01 December 2025, Version 1
This content is an early or alternative research output and has not been peer-reviewed by Cambridge University Press at the time of posting.

Abstract

Abstract Background: The rise of "zero-click" exploits has created a lucrative market for commercial spyware, allowing state actors to compromise devices without user interaction. Methods: This study utilizes a qualitative analysis of open-source intelligence, investigative journalism, and forensic reports to map the ecosystem of Private Sector Offensive Actors (PSOAs). Results: Investigation into firms like NSO Group and Intellexa reveals a systemic pattern where "national security" tools are repurposed for political espionage against journalists and activists. The market currently thrives within a regulatory void, resistant to fragmented national sanctions. Conclusion: The normalization of mercenary surveillance poses an existential threat to press freedom and the rule of law. The paper recommends a global moratorium on the transfer of such technology until a binding international legal framework is established.

Keywords

Zero-Click Exploits
Commercial Spyware
Espionage-as-a-Service (EaaS)
Private Sector Offensive Actors (PSOAs)
Transnational Repression

Comments

Comments are not moderated before they are posted, but they can be removed by the site moderators if they are found to be in contravention of our Commenting and Discussion Policy [opens in a new tab] - please read this policy before you post. Comments should be used for scholarly discussion of the content in question. You can find more information about how to use the commenting feature here [opens in a new tab] .
This site is protected by reCAPTCHA and the Google Privacy Policy [opens in a new tab] and Terms of Service [opens in a new tab] apply.