U.S. Department of the Treasury—Treasury quietly removed sanctions on three executives tied to Intellexa spyware consortium
On December 30, 2025, the Treasury Department's Office of Foreign Assets Control removed three executives linked to the Intellexa commercial spyware consortium from its sanctions list. The individuals had been sanctioned by the Biden administration in 2024 for enabling spyware (including Predator, capable of one-click and zero-click device compromise) used to target U.S. government officials, journalists, policy experts, opposition politicians, and activists worldwide, as part of a broader effort under Executive Order 14093 to curb commercial spyware. Treasury and State Department officials offered only a vague characterization of the removal as a 'normal administrative process,' without publicly explaining what changed in the underlying conduct that had justified the original designations.
Scoring Impact
| Topic | Direction | Relevance | Contribution |
|---|---|---|---|
| Government Ethics & Anti-Corruption | -against | secondary | -0.50 |
| Surveillance Technology | +toward | primary | -1.00 |
| Overall incident score = | -0.664 | ||
Score = avg(topic contributions) × significance (high ×1.5) × confidence (0.59)
Evidence (1 signal)
Reuters, The Record and CyberScoop confirm Treasury delisted Intellexa-linked spyware executives from sanctions
Reuters, cybersecurity outlet The Record (Recorded Future News) and CyberScoop independently reported that Treasury removed three individuals tied to the Intellexa spyware consortium from the OFAC sanctions list on December 30, 2025, reversing a Biden-era designation that had cited the group's role enabling surveillance of journalists, dissidents and US officials.