
A new phase of a high-profile scandal is unfolding in Spain, one that could reshape attitudes toward digital security issues and the transparency of law enforcement agencies. The Barcelona courtβs decision to open a case against former leaders of the Guardia Civil has taken many by surprise: for the first time, such senior representatives of the agency have found themselves at the center of an investigation into the illegal use of spyware Pegasus and Candiru. For Spanish society, this is more than just another headlineβitβs a matter of trust in government institutions and the limits of what is acceptable in the name of national security.
Judge Miriam de Rosa Palacio has decided to hold FΓ©lix Vicente AzΓ³n and MarΓa GΓ‘mez, who led the Guardia Civil at different times, accountable. In addition, former head of the National Intelligence Center (CNI) Paz Esteban, whose name has repeatedly surfaced in cases of illegal surveillance but until now had avoided serious consequences due to restrictions related to state secrecy, is once again under investigation.
The investigation initiative belongs to the Sentinel Group, which brings together specialists in digital identity and electronic voting. According to their statement, they were under surveillance for two years starting in 2019, and their devices were attacked at least 78 times. An analysis conducted by independent experts revealed that the malware not only granted access to all files and communications, but also enabled cameras and microphones to be activated without the ownersβ knowledge.
New suspects and expanded investigation
A key feature of this case is that, for the first time, investigators are focusing not only on the Pegasus program but also on a lesser-known yet equally dangerous tool, Candiru. As a result, suspicion has fallen not only on law enforcement representatives but also on executives of developer companies, including Saito Tech Ltd, as well as European affiliates from Luxembourg linked to Israelβs NSO Group.
The victims insist their persecution was not random but targeted, and that information obtained via spyware eventually ended up in the media, damaging both their business reputations and their companies. Although all criminal cases against them were dropped, the impact on their professional activities proved to be significant.
As part of the investigation, the court is also considering the possibility that the Spanish intelligence services used Candiru alongside Pegasus, something that had not previously been officially confirmed. This opens a new chapter in the history of digital espionage in Spain and raises questions about the transparency of government operations.
Demands to the government and international inquiries
The victims and their lawyers are demanding that the government disclose documents related to the use of Pegasus and Candiru and conduct independent examinations of their devices. They also insist on international cooperation: requests have been sent to Luxembourg and Israel, where the key developer companies are based, but so far these initiatives have not yielded tangible results.
Special attention is being paid to the fact that such programs can only be purchased by state agencies, further highlighting the scale and seriousness of the accusations. The question of who exactly authorized the use of such powerful surveillance tools remains unanswered and is causing broad public concern.
The victims’ lawyer Xavier MuΓ±oz emphasizes that the launched investigation is a complex but necessary step for strengthening the rule of law. One of the claimants, Joan ArΓΊs, notes that the use of military-grade spy software against civilians is a troubling signal for society as a whole.
Context and implications for Spain
Reflecting on recent events, it’s worth noting that issues of transparency and accountability of law enforcement agencies have repeatedly come under discussion in Spain. For instance, RUSSPAIN.COM previously examined in detail the case where a judge refused to reopen the investigation against MarΓa Dolores de Cospedal in the Villarejo affair, which sparked a strong public reaction and cast doubt on trust in the judicial system. You can learn more about how events unfolded in that case in the article at the link.
Scandals involving the use of spying technologies are becoming increasingly common not only in Spain but worldwide. In recent years, similar investigations have taken place in several European countries, where questions have also been raised about the legality and ethics of using such tools against civilians. The surge of interest in digital espionage is linked to the growing number of incidents involving unauthorized access to personal data, pushing authorities to reconsider their approaches to oversight of intelligence operations and the protection of citizens’ rights.












