Atlantic Council Report Finds Spyware Market Grew to 561 Entities as Intermediaries Circumvent Export Controls
An Atlantic Council report published March 18 and covered by Dark Reading on March 26 documented that the global commercial spyware ecosystem has expanded from 435 to 561 organizations, with intermediaries serving as the operational backbone that circumvents export controls and trade bans. Brokers and resellers provide exploit engineering, operational training, and deployment infrastructure while maintaining legal paper trails that obscure origins. The market is fueled by government demand for law enforcement, espionage, and surveillance of political opponents. The report found intermediaries facilitate sales to countries lacking in-house technical capabilities regardless of size, enabling proliferation to regimes that would otherwise be blocked by sanctions.
The 29% growth in documented spyware entities (435 to 561 across 46 countries) is drawn from a single primary source, the Atlantic Council's Mythical Beasts series, with both Dark Reading and TechPolicy.Press rewriting that dataset rather than independently corroborating it. The finding that intermediaries form the operational backbone, evidenced by cases like Predator sales routed to Bangladesh through shell companies despite trade bans, directly challenges the current enforcement model targeting manufacturers rather than the brokers circumventing controls. The report's policy recommendations, including "Know Your Vendor" disclosure requirements within the 27-state