BotNet News

News and research about cyber threats that threaten journalists and their sources.

A cybersecurity threat is an attack exploiting a vulnerability in software or hardware, affecting the confidentiality, integrity and availability (CIA Triad) of networks, data and people. This can include malware, ransomware, phishing attacks, denial-of-service, and hacking attempts to steal information or money. Threats are often carried out by criminal networks, rogue states, and powerful individuals as well as governmental agencies and corporations.

Digital security challenges for global news media and their sources

As high-profile targets for malware, spyware and digital surveillance, journalists face unique risks in their work that can affect their physical and mental health, as well as the safety of their sources. These include online harassment and doxing campaigns that expose journalist names and contact information on the dark web, compromising their and their sources’ personal safety; and government-sponsored spyware programs like NSO Group’s Pegasus and QuaDream’s Reign targeting journalists and human rights activists to steal intellectual property, undermine privacy and disrupt critical infrastructure systems.

Other digital security challenges include attempts by governments to chip away at encryption protections for messaging apps like Signal and WhatsApp, or to use social media platforms like X to spy on journalists or civil society groups, or by using generative AI technologies to manipulate the likeness of journalists (discussed in CNTI’s issue primer on journalist digital safety). Finally, many small businesses lack the resources, funding and technology infrastructure to practice good cybersecurity and can be more vulnerable than large organizations to attacks that target them specifically.