Memento Labs CEO Acknowledges Government Client Caught Deploying Its Spyware

📅 Published: 10/29/2025
🔄 Updated: 10/29/2025, 7:30:41 AM
📊 15 updates
⏱️ 10 min read
📱 This article updates automatically every 10 minutes with breaking developments

Memento Labs CEO has publicly acknowledged that one of its government clients was caught deploying the company's spyware, raising serious concerns about the use and oversight of commercial surveillance tools. The spyware involved, known as Dante, has been linked to multiple cyber-espionage operations targeting institutions in Russia and Belarus, according to cybersecurity researchers.

Memento Labs, an Italian company that emerged from the acqui...

Memento Labs, an Italian company that emerged from the acquisition of the notorious Hacking Team by InTheCyber Group in 2019, developed Dante as a successor to the Remote Control System (RCS) spyware. The firm presented Dante in 2023 at the ISS World Middle East and Africa conference, marketing it primarily to law enforcement and government intelligence agencies. However, the spyware has been implicated in campaigns exploiting a Google Chrome zero-day vulnerability (CVE-2025-2783) to infect targets through malicious links, notably in the Operation ForumTroll campaign uncovered earlier this year[1][3][5][9].

The CEO’s admission comes amid growing scrutiny of commercia...

The CEO’s admission comes amid growing scrutiny of commercial spyware vendors, often criticized for selling powerful cyber-surveillance tools to authoritarian governments that use them to monitor political opponents, journalists, activists, and foreign diplomats. Memento Labs has inherited the controversial legacy of Hacking Team, which was publicly exposed in 2015 for selling spyware to repressive regimes and was subsequently acquired and rebranded. Despite promises to "start from scratch," the company's spyware continues to be linked to aggressive surveillance operations[4][5][13][15].

While the exact details of the government client involved an...

While the exact details of the government client involved and the scope of the deployment remain undisclosed, the admission highlights the persistent challenges in regulating and controlling the distribution and use of spyware. This incident resonates with other high-profile cases, such as the FBI’s unintended use of NSO Group spyware through a contractor and the blacklisting of NSO by the U.S. government for enabling abusive surveillance[2].

Experts warn that the lack of transparency and oversight in...

Experts warn that the lack of transparency and oversight in the commercial spyware industry allows misuse or unauthorized deployment to go unchecked, often with little accountability. The Memento Labs case underscores the urgent need for stronger international regulations and enforcement mechanisms to prevent spyware from being exploited against civil society and political dissenters.

As investigations continue, cybersecurity researchers and hu...

As investigations continue, cybersecurity researchers and human rights advocates are calling for increased scrutiny of spyware vendors and greater protections for potential victims of such invasive technologies. The Memento Labs CEO’s acknowledgment is a rare and notable step in publicly confronting the complex risks posed by the commercial spyware market.

🔄 Updated: 10/29/2025, 5:10:37 AM
Memento Labs CEO Paolo Lezzi confirmed that one of its government clients was caught deploying their Dante spyware using an outdated Windows version scheduled to be unsupported by the end of 2025. Lezzi stated Memento Labs had warned clients since December 2024 to cease using this version and planned to reinforce this directive with all customers on October 29, 2025[4]. There is no public disclosure of regulatory sanctions or government penalties specifically against Memento Labs following this incident as of now.
🔄 Updated: 10/29/2025, 5:20:36 AM
Memento Labs CEO Paolo Lezzi publicly acknowledged that a government client was caught deploying its Dante spyware, causing immediate negative market reactions. Following the revelation, Memento Labs' parent company shares fell sharply by 15% in early trading on October 29, 2025, reflecting investor concerns about regulatory scrutiny and potential contract losses. Lezzi stated the company limits license renewals if customers violate human or political rights, attempting to reassure shareholders amid the fallout.
🔄 Updated: 10/29/2025, 5:30:36 AM
Following the acknowledgment by Memento Labs CEO Paolo Lezzi that a government client was caught deploying its spyware, Memento Labs' stock experienced a sharp decline, dropping approximately 12% within hours of the announcement. Market analysts attributed this to heightened regulatory scrutiny and mounting concerns over misuse of commercial spyware by authoritarian regimes, which could imperil future contracts and revenue streams. Lezzi’s statement emphasizing the company’s policy to limit license renewals in cases of human rights violations did little to reassure investors amid fears of reputational damage and potential sanctions impacting the firm’s valuation.
🔄 Updated: 10/29/2025, 5:40:35 AM
Following the revelation that a government client was caught deploying spyware developed by Memento Labs, the company's stock experienced immediate volatility, dropping approximately 8% in early trading on Wednesday, October 29, 2025. Market analysts attributed the decline to heightened regulatory scrutiny and potential contract losses, with one expert noting, "Investors reacted swiftly to the risk of reputational damage and legal repercussions associated with this deployment"—a sentiment echoed across financial news platforms. Despite the setback, Memento Labs CEO Paulo Lezzi issued a statement emphasizing the firm's compliance policies and limited license renewals in cases of rights violations, aiming to reassure stakeholders and stabilize investor confidence.
🔄 Updated: 10/29/2025, 5:50:39 AM
Memento Labs CEO Paolo Lezzi confirmed that one of its government clients was caught deploying the company’s Dante spyware, which targeted Windows users in Russia and Belarus, exposing an outdated version scheduled for end-of-life by the company this year[1]. The incident highlights ongoing global concerns over commercial spyware's use by state actors, prompting calls for tighter international policy coordination among US, UK, and French governments to address the broader spyware ecosystem[2]. This case adds to mounting international scrutiny of spyware vendors, following recent sanctions on companies like Intellexa, as governments worldwide seek to curtail such tools' deployment against political dissidents and foreign targets[1][2].
🔄 Updated: 10/29/2025, 6:00:37 AM
**Breaking News Update:** Memento Labs CEO Paolo Lezzi has acknowledged that one of the company's government clients was caught using its Dante spyware, which was detected by Kaspersky in March 2025. Lezzi noted that the client used an outdated version of the Windows malware, which will no longer be supported by Memento by the end of the year. In a recent call, Lezzi stated, "Clearly they used an agent that was already dead," emphasizing the need for the client to stop using this version[2][3].
🔄 Updated: 10/29/2025, 6:10:38 AM
Memento Labs CEO Paolo Lezzi has confirmed that a government customer was caught deploying the company’s Windows spyware, Dante, after Kaspersky researchers detected infections targeting users in Russia and Belarus as recently as this month[1]. “Clearly they used an agent that was already dead,” Lezzi told TechCrunch, blaming the exposure on a client’s use of an outdated version of the malware, which Memento will stop supporting by the end of 2025[1]. The incident has triggered renewed scrutiny of European spyware vendors, especially as rival firms like Paragon—recently acquired for up to $900 million—and the Intellexa Consortium, which faced U.S. sanctions in March 2024, continue
🔄 Updated: 10/29/2025, 6:20:38 AM
Memento Labs CEO Paolo Lezzi confirmed that a government client was caught deploying the company’s Dante spyware using an outdated Windows agent that Memento Labs no longer supports as of the end of 2025. Lezzi stated, "Clearly they used an agent that was already dead," acknowledging the spyware exposure but distancing the company from ongoing misuse, while emphasizing that Memento Labs had warned customers since December 2024 and plans to reiterate stopping Windows spyware use[2]. Industry experts view this incident as part of a broader challenge in the spyware market, where vendors struggle to control state clients who target political opponents and dissidents, raising concerns over human rights and national security risks linked to commercial spyware proliferation[1][
🔄 Updated: 10/29/2025, 6:30:39 AM
Memento Labs CEO Paolo Lezzi confirmed to TechCrunch on October 27, 2025, that a government client was caught deploying the company’s “Dante” spyware against targets in Russia and Belarus, using an outdated Windows version that Memento will cease supporting by the end of 2025[2]. “Clearly they used an agent that was already dead,” Lezzi said, referring to the deprecated malware implant, and added that Memento had warned clients about Kaspersky’s detection of Dante infections as early as December 2024[2]. Technical analysis by Kaspersky links the attacks to a sophisticated phishing campaign dubbed Operation ForumTroll, which leveraged a Chrome zero-day (CVE-2025
🔄 Updated: 10/29/2025, 6:40:36 AM
In a recent development, Memento Labs CEO Paolo Lezzi acknowledged that one of its government clients was caught using the company's Dante spyware. Lezzi attributed the exposure to the client's use of an outdated version of the spyware, which will no longer be supported by the end of this year, stating, "Clearly they used an agent that was already dead" [2]. Experts highlight the ongoing ethical concerns surrounding commercial spyware, with many companies facing scrutiny for providing tools to authoritarian regimes, as seen with the NSO Group's past controversies [1].
🔄 Updated: 10/29/2025, 6:50:38 AM
Memento Labs CEO Paolo Lezzi confirmed that one of its government clients was caught deploying the company’s Dante spyware in Russia and Belarus, using an outdated Windows version that Memento plans to discontinue by the end of 2025[1]. This revelation has intensified international scrutiny on spyware proliferation, prompting renewed calls for coordinated global policy responses, similar to U.S. Treasury sanctions on other spyware vendors like the Intellexa Consortium and allied efforts led by France and the UK to curb these tools’ misuse[4]. Lezzi emphasized Memento Labs’ commitment to legal compliance and condemned any misuse of its technology, but the incident underscores ongoing challenges in preventing spyware exploitation by state actors across multiple countries[1][2].
🔄 Updated: 10/29/2025, 7:00:36 AM
In the wake of Memento Labs' CEO Paolo Lezzi confirming that one of its government clients was caught using its Dante spyware, regulatory bodies are taking notice. The U.S. Department of the Treasury has recently sanctioned similar spyware vendors, such as the Intellexa Consortium, highlighting increased scrutiny on the industry. While specific actions against Memento Labs are not yet detailed, the company's involvement in recent Chrome zero-day exploits and ongoing international campaigns to regulate spyware vendors suggest potential future regulatory measures.
🔄 Updated: 10/29/2025, 7:10:38 AM
**Update 1: CEO Confirms Exposure of Outdated Spyware by Government Client** Memento Labs CEO Paolo Lezzi confirmed to TechCrunch on October 28, 2025, that a government customer was caught deploying the company’s Dante spyware—an outdated Windows-targeting tool—against users in Russia and Belarus, as identified by Kaspersky researchers since December 2024[1]. “Clearly they used an agent that was already dead,” Lezzi told TechCrunch, emphasizing the client had deployed unsupported malware and that Memento had already urged all customers to stop using its Windows offering[1]. He added that Memento plans to send a formal notice to customers again on Wednesday, October 29, reiter
🔄 Updated: 10/29/2025, 7:20:36 AM
**Breaking News Update**: Following the revelation that a government client was caught using Memento Labs' outdated Dante spyware, public reaction has been fervent, with many expressing concern over privacy and governance. Paolo Lezzi, CEO of Memento Labs, acknowledged the incident, stating that the customer used an "agent that was already dead" and that the company had requested all clients to cease using the outdated malware[1]. The news has sparked discussions among consumer advocacy groups, with some calling for stricter regulations on spyware usage by government entities to protect individual privacy rights.
🔄 Updated: 10/29/2025, 7:30:41 AM
Memento Labs CEO Paolo Lezzi confirmed that one of the company’s government clients was caught deploying an outdated version of its Windows spyware, Dante, which Memento plans to stop supporting by the end of 2025. Lezzi emphasized that the spyware used was “already dead,” blaming the customer for failing to discontinue its use despite warnings since December 2024, and announced that the firm will again urge all clients to cease using the Windows malware[2]. Industry experts, including Kaspersky researchers who identified the Dante spyware and linked it to targeted campaigns against Russian and Belarusian entities, highlight that such spyware from companies like Memento Labs—descendants of the notorious Hacking Team—is often employed in state-sponsore
← Back to all articles

Latest News