Amnesty International

Amnesty International is a global human rights movement and non-governmental organization with its international secretariat headquartered in the United Kingdom. Its core mission is to conduct research and take action to prevent and end grave abuses of human rights, demanding justice for those whose rights have been violated. The organization operates on the principle that all people are entitled to the rights enshrined in the Universal Declaration of Human Rights. Its work spans investigating and exposing human rights violations, mobilizing public pressure to generate change, and supporting activists and defenders on the front lines. This involves documenting crimes against humanity, torture, enforced disappearances, and the suppression of free speech across more than 150 countries. The organization's advocacy targets governments, corporations, and other powerful actors, employing strategies such as lobbying, media campaigns, and grassroots mobilization to hold them accountable. Its research and reports are widely cited by journalists, policymakers, and legal bodies, establishing it as a primary source for human rights documentation worldwide. The movement is independent of any government, political ideology, or religious creed, funding its work primarily through donations from its worldwide membership and supporters.

A defining aspect of Amnesty International's operational context is its exposure to sophisticated digital threats due to its high-profile human rights investigations. In June 2018, the organization was directly targeted in a complex cyber espionage campaign. Staff members, including a UK-based employee and a Saudi activist associated with the organization abroad, received malicious messages via WhatsApp. These messages contained Saudi Arabia-related bait and delivered links to mobile spyware, later identified as part of the Pegasus spyware infrastructure operated by the NSO Group. Forensic analysis by Amnesty's Security Lab revealed connections between the attack and a network of over 600 suspicious domains. This incident underscores the organization's critical role in digital security research for civil society. Following its investigation, Amnesty International publicly disclosed the extensive domain network associated with the campaign. This disclosure was a deliberate act to aid the broader security research community and increase transparency around the commercial spyware industry's capabilities. The event highlights the organization's dual function: as a traditional human rights investigator and as a frontline actor in documenting and countering the misuse of surveillance technology against human rights defenders and journalists. Its technical expertise in analyzing such attacks is a notable competency that directly supports its core investigative mandate.