RSF finds new Android spyware on detained Belarusian journalist phone

 JournalismPakistan.com |  Published: 18 December 2025 |  JP Global Monitoring Desk

Forensic investigators have uncovered a new spyware called ResidentBat on the phone of a detained Belarusian journalist. This discovery raises significant concerns about digital surveillance and press freedom in Belarus.

Summary

PARIS — Reporters Without Borders said forensic investigators working with civil society partners have identified a previously undocumented Android spyware on the seized phone of a Belarusian journalist. The organization said the tool, dubbed ResidentBat, was discovered during technical analysis after the journalist’s detention.

According to RSF, the spyware is capable of harvesting phone calls, messages, files, microphone recordings, and screen captures. Investigators believe the tool was likely deployed while the journalist was in detention, though RSF did not publicly identify the individual or the detaining authority.

New spyware discovery highlights mobile risks

RSF said the findings point to an escalation in the use of sophisticated mobile surveillance against journalists, particularly in highly restrictive media environments. Android devices are widely used by reporters due to their affordability and flexibility, making them a frequent target for digital intrusion.

The organization noted that ResidentBat had not been previously documented in public reporting, raising concerns that additional, undiscovered surveillance tools may be in use against members of the press. RSF emphasized that forensic access to seized devices is often the only way such tools are detected.

Belarus context and press freedom concerns

Belarus has faced sustained international criticism over its treatment of independent media, including arrests, detentions, and the confiscation of journalists’ equipment. RSF has repeatedly documented cases in which digital surveillance is used alongside physical detention to intimidate reporters and restrict information flows.

RSF said the alleged deployment of spyware during detention underscores the vulnerability of journalists’ sources and unpublished materials once devices are seized. The organization warned that such practices can have a chilling effect on investigative reporting.

Call for stronger protections and accountability

RSF and its partners said the case reinforces the need for stronger safeguards for journalists’ digital security and greater accountability for the use of surveillance technologies. The organization called on authorities to respect international standards on press freedom and privacy, and urged technology companies and governments to address the misuse of spyware against media workers.

ATTRIBUTION: Reporting based on statements and findings released by Reporters Without Borders and its civil society partners.