One click—and you’re spied on: GFF files criminal complaint alongside journalist Trung Khoa Lê following spyware attack
Berlin, May 28, 2026 – The Society for Civil Rights (GFF) today filed a criminal complaint against persons unknown, together with German-Vietnamese journalist Trung Khoa Lê, regarding an attempted spyware attack. Lê is the editor of the important Vietnamese news site Thoibao.de, which he runs from Germany. The attackers, who are believed to be operating from abroad, unsuccessfully attempted to install spyware on his laptop and cell phone via Platform X.
Had the attack succeeded, the perpetrators would have been able to access all of his communications as well as all data stored on those devices. Such an attack constitutes a massive invasion of the privacy of those affected. It also violates the fundamental right to confidentiality and integrity of digital devices (the so-called IT fundamental right) as well as the secrecy of telecommunications. In this specific case, the perpetrators are also violating source protection. The authorities are obligated to protect citizens from such attacks.
“It has been known for two and a half years that I was attacked with spyware,” says Trung Khoa Lê. “So far, no one has even investigated—let alone held the perpetrators accountable. That is why I have now filed a criminal complaint.”
Trung Khoa Lê has been reporting critically on the Vietnamese government’s policies for years. In the past, he has already been subjected to numerous attacks against his person and is under police protection following death threats. To gain access to his devices, the attackers left a reply in February 2023 under a post by the Thoibao account on X.
In addition to a comment regarding the content, the public reply also contained a link that was allegedly related to the topic. Had Lê clicked on the link, spyware would have infiltrated his devices. Experts from Amnesty International conducted a forensic analysis of the attack and determined, among other things, that the perpetrators used the spyware Predator from provider Intellexa. This type of spyware exploits security vulnerabilities in software systems.
The aim of the criminal complaint is for the Berlin public prosecutor’s office and police to investigate the attack and identify the perpetrators. They are suspected of having committed an attempted violation of the confidentiality of the spoken word. The attack was not an isolated incident: activists and journalists in particular are heavily affected by digital espionage attacks originating from abroad. This jeopardizes freedom of expression and freedom of the press—even in Germany.
“Spyware attacks threaten fundamental rights and our democracy,” says Franziska Görlitz, a lawyer and litigation coordinator at the GFF. “The authorities must do more to protect people who are targeted because they advocate for democracy and freedom of the press.”
So far, Germany lacks an effective, public vulnerability management system: Such a system must ensure that government agencies, such as the police, report particularly dangerous software vulnerabilities and close them quickly. If security vulnerabilities remain unaddressed and are exploited for government surveillance measures, the digital security of all citizens is at risk. Through the SpywareShield Initiative in Germany and Europe, the GFF is committed to limiting the use and spread of spyware.
Further information can be found on our case page.
For further inquiries, please contact:
Dr. Maria Scharlau,
presse@freiheitsrechte.org
Tel. 030/549 08 10 55