The hacker who humiliated spyware makers and was never caught
Looking back at the journey of Phineas Fisher, the hacktivist who humiliated spyware companies and vanished without a trace.
Stock photo for illustration only, not from the actual event
- Phineas Fisher is a notorious hacker famous for targeting spyware companies.
- Gained widespread fame by breaching Gamma Group and Hacking Team.
- Leaked massive volumes of sensitive data, source code, and internal emails.
- A decade later, their true identity remains completely unknown and uncaptured.
Over the last few decades, several mysterious hackers have captured the public’s imagination, but none quite like Phineas Fisher. A decade after their most famous hack, Phineas remains, by most accounts, the most prolific and public hacker never to have been caught. Apart from Anonymous, an amorphous amalgam of hacktivists with a mixed track record of mostly stunt hacks designed to gather publicity rather than have real impact, Phineas is perhaps the most well-known hacktivist in history. Their story is made of impressive hacks and endless unanswered questions.
Variously called an anarchist, a cybercriminal, a hacktivist, and a vigilante, the hacker has said they use a lot of different names for different hacking escapades. Phineas first emerged in August 2014, when they announced they had hacked Gamma Group, the makers of the FinFisher spyware, which is where the nickname comes from. They publicized the hack via a Twitter account cheekily called @GammaGroupPR, leaking stolen data including mobile spyware, product manuals, and a price list. The damage was limited, and FinFisher carried on. Phineas published a post-mortem that doubled as a leftist manifesto, then vanished.
Stock photo for illustration only, not from the actual event
A year later, they came back with a bang, hacking Hacking Team, another spyware maker. They took practically everything: more than 400 gigabytes including source code, tens of thousands of internal emails, confidential contracts, and customer lists. The leak allowed journalists to reveal scandals in Ecuador, Mexico, and Panama. Years later, Hacking Team’s CEO David Vincenzetti was forced to sell his company for one euro. For some former employees, Phineas’ hack was the beginning of the end.
The targeting of commercial spyware vendors like Hacking Team and Gamma Group marked a watershed moment for cybersecurity, exposing how surveillance tools sold to governments were frequently used against journalists and activists. By weaponizing transparency through massive data leaks, these operations fundamentally challenged the secretive nature of the commercial surveillance industry and inflicted severe financial and reputational damage on the firms involved.
Phineas went on to hack the union of the Mossos d’Esquadra, which is the police force of Catalonia, publishing a post-mortem and a 39-minute tutorial video, consistent with their stated anti-police ideals. Their next victim was the ruling party of Turkey’s authoritarian president Recep Tayyip Erdoğan, a hack motivated by solidarity with Rojava, a leftist autonomous region in northern and eastern Syria that Turkey was fighting against.
That was their last public appearance. Their Twitter and Reddit accounts have long since been deleted, leaving no online trail. FinFisher never contacted law enforcement, according to a former company employee. The Italian authorities’ investigation into the Hacking Team hack ended without finding any evidence pointing to Phineas’ real identity. Reporting confirms that Phineas is alive and well, having been in contact within the last couple of years.
Source: TechCrunch
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment