https://www.bleepingcomputer.com/news/security/microsoft-israeli-firm-used-windows-zero-days-to-deploy-spyware/

Microsoft and Citizen Lab have linked Israeli spyware company Candiru (also tracked as Sourgum) to new Windows spyware dubbed DevilsTongue deployed using now patched Windows zero-day vulnerabilities.

"Candiru is a secretive Israel-based company that sells spyware exclusively to governments," Citizen Lab explained in a report published today. "Reportedly, their spyware can infect and monitor iPhones, Androids, Macs, PCs, and cloud accounts."