Greek Court Convicts Intellexa Executives in Landmark Predator Spyware Case

A Greek court has delivered a watershed verdict in one of Europe's most significant spyware scandals, convicting four individuals linked to the development and illegal use of the Predator surveillance software. The case, widely dubbed the "Greek Watergate," concludes a dramatic legal chapter that exposed how commercial spyware was weaponized against a state's own democratic institutions.

The Athens-based Three-Member Misdemeanor Court of Appeals found the defendants guilty on February 26, 2026, on charges including violation of state secrets and privacy laws. The harshest sentence—eight years imprisonment—was handed to a former executive of Intellexa, the commercial entity behind the Predator spyware, which has ties to Israeli intelligence expertise. The individual, whose identity has been widely reported in international media, was a central figure in the spyware's operations in Greece.

Three Greek co-defendants, including a former employee of the National Intelligence Service (EYP), received sentences ranging from a three-year prison term to suspended sentences. The convictions stem from a sprawling investigation that began in 2022, revealing that Predator had been used to surveil dozens of high-profile targets. The victims' list read like a who's who of Greek public life: it included the leader of the socialist PASOK party, Nikos Androulakis; several prominent journalists investigating corruption; and at least one senior military officer.

Technical Profile of a Threat: The Predator Spyware

Predator is a sophisticated mobile surveillance tool, often categorized as a mercenary spyware alongside notorious counterparts like NSO Group's Pegasus. It operates as a full-chain exploit, capable of compromising a target's smartphone without requiring any interaction from the victim (a "zero-click" attack). Once installed, it can exfiltrate emails, messages, photos, and contacts, activate microphones and cameras for real-time surveillance, and track the device's location.

Intellexa, the vendor, has marketed itself as a "cyber intelligence" company providing tools to governments for lawful interception. However, the Greek case demonstrated a critical failure in end-use controls, showing how such powerful cyber weapons can easily be diverted for illegitimate domestic political espionage. The technical investigation revealed that the spyware infrastructure was linked to servers in Greece, and its deployment was tied to specific phone numbers, including that of the politician Androulakis, who was notified of the attempt by the European Parliament's cybersecurity services.

Implications for the Cybersecurity and Policy Landscape

This verdict is not merely a national news item; it is a landmark event for the global cybersecurity community and the fight against unregulated surveillance technology. It establishes a powerful legal precedent: the architects and purveyors of commercial spyware can face severe criminal liability for the misuse of their products.

For years, the surveillance-for-hire industry has operated in a gray zone, shielded by claims of selling to "vetted governments" for national security purposes. The Greek convictions pierce that shield, affirming that companies and their employees have a duty of care and can be prosecuted when their tools are used to violate fundamental rights. This could empower prosecutors in other jurisdictions to pursue similar cases, potentially chilling the unregulated spyware market.

Furthermore, the scandal forced a major reckoning within Greece, leading to the resignation of the head of the National Intelligence Service and the nephew of the then-Prime Minister, who served as a top government aide. It triggered parliamentary inquiries and strained Greece's relations with the European Union, which has been tightening regulations on dual-use surveillance technology.

The Road Ahead: Accountability and Regulation

While the convictions are a decisive step toward accountability, they also highlight systemic vulnerabilities. The case underscores the urgent need for robust, international regulatory frameworks governing the export and use of intrusive cyber surveillance tools. The EU's new rules on the export of dual-use items, including spyware, are a start, but enforcement remains a challenge.

For cybersecurity professionals, the Predator case is a stark reminder of the advanced persistent threats (APTs) that now originate from the commercial sector. Defending against such tools requires heightened vigilance, particularly for individuals in sensitive positions like politicians, activists, and journalists. Regular device forensics, the use of threat intelligence services that track mercenary spyware, and advocacy for stronger legal protections are essential countermeasures.

The "Greek Watergate" verdict sends an unambiguous message: the era of impunity for the merchants of digital surveillance may be coming to an end. As democracies worldwide grapple with the corrosive effects of spyware, this legal outcome in Athens provides a crucial blueprint for holding the shadowy industry to account.