BeirutConfirming spyware infection is only the easy part.
Journalists get a diagnosis then no path to notify contacts or seek recourse.
Most of the region has no data-protection authority, and the government that bought the spyware often controls the courts.
SMEX wants a post-detection protocol for evidence, notification and legal referral, not yet built.
Sources: SMEX