A Greek court just handed down an eight-year prison sentence to Tal Dilian, the founder of Intellexa, a notorious spyware consortium that's been on regulators' radar for years. The conviction stems from the "Greek Watergate" scandal that erupted in 2022, when authorities uncovered illegal surveillance targeting politicians and journalists. Three other Intellexa executives were also convicted in what marks one of the first major criminal convictions against commercial spyware operators in Europe.
The verdict lands as governments worldwide grapple with how to regulate the shadowy commercial spyware industry. Intellexa, which develops the Predator surveillance tool capable of silently infiltrating smartphones, has been operating in a legal gray zone for years, selling its technology to government clients across dozens of countries.
Tal Dilian didn't appear in court for the sentencing. The Israeli-born entrepreneur has kept a low profile since the Greek Watergate scandal broke, when investigators discovered that his company's tools were used to monitor opposition politicians, journalists, and business leaders without proper legal authorization. The operation reportedly ran for months before whistleblowers exposed it in 2022.
The Greek prosecution centered on charges that Intellexa provided both the technology and operational support for the illegal surveillance campaign. According to court documents, the spyware was deployed against at least 33 targets, including the leader of Greece's third-largest political party and several investigative journalists covering government corruption. The revelations triggered a political crisis that eventually led to the resignation of Greece's intelligence chief.
Intelleza's Predator spyware works by exploiting vulnerabilities in mobile operating systems, allowing operators to access everything from encrypted messages to live microphone feeds. The tool has been detected in surveillance operations across Europe, Africa, and the Middle East. Security researchers at Citizen Lab have documented Predator infections in over a dozen countries, often targeting civil society activists and opposition figures.
The company operates through a complex network of subsidiaries and shell companies spanning Cyprus, Greece, Ireland, and other jurisdictions. This corporate structure has made it difficult for regulators to trace the full scope of Intellexa's operations or enforce accountability. The consortium includes at least five different spyware development firms that share technology and customers.
In March 2024, the U.S. Commerce Department added Intellexa to its Entity List, effectively banning American companies from doing business with the group. The sanctions cited evidence that Intellexa's tools were being used to target U.S. government personnel and journalists. The European Union has also moved to restrict spyware sales, though enforcement remains patchy across member states.
The Greek conviction could set a precedent for how other countries handle commercial spyware vendors. Most previous legal actions against surveillance technology companies have been civil cases or regulatory penalties. Criminal prosecutions of company executives remain rare, even as evidence mounts that commercial spyware is routinely abused for political surveillance.
Dilian's three co-defendants received sentences ranging from five to seven years. All four were convicted in absentia, and it remains unclear whether Greek authorities will be able to enforce the sentences. Intellexa maintains offices in multiple countries, and its executives frequently travel to meet government clients.
The spyware industry has grown into a multibillion-dollar market, with vendors like Israel's NSO Group and Italy's Hacking Team selling sophisticated surveillance tools to governments with questionable human rights records. These companies argue they only sell to legitimate law enforcement agencies, but investigations have repeatedly shown their products being misused for political spying.
Intelleza hasn't issued any public statement about the verdict. The company's website remains active, though it provides few details about its products or clients. Industry observers say the firm continues to operate despite the sanctions and legal troubles, relying on a network of intermediaries to reach customers.
Greek prosecutors are reportedly investigating whether additional government officials were involved in authorizing the illegal surveillance. The scandal has already claimed several political casualties, including ministers who denied knowledge of the spyware program even as evidence suggested high-level approval.
The eight-year sentence sends a clear signal that European courts are willing to hold spyware executives criminally accountable, not just slap them with fines. But the real test comes next - whether Greek authorities can actually arrest Dilian and his co-defendants, and whether other countries follow suit with similar prosecutions. The commercial spyware industry has thrived in legal ambiguity for years, selling powerful surveillance tools while claiming no responsibility for how they're used. This conviction suggests that era might be ending, at least in Europe. For now, Intellexa continues operating despite the sanctions and legal pressure, a reminder that shutting down these surveillance vendors requires coordinated international enforcement, not just isolated court victories.
