Commercial spyware once occupied a narrow niche, but that boundary has eroded quickly. Capabilities once associated with state operators now circulate through a broader criminal supply chain, lowering the bar for surveillance, account takeover, and device compromise.
For enterprise security teams, this means mobile risk can no longer be treated as a consumer problem. Organisations need continuous device inspection, behavioural analysis, and fast response paths when signs of covert surveillance appear.