{"id":16665,"date":"2026-02-09T18:08:03","date_gmt":"2026-02-09T16:08:03","guid":{"rendered":"https:\/\/zawia3.com\/?p=16665"},"modified":"2026-10-07T00:24:58","modified_gmt":"2026-10-06T22:24:58","slug":"spy-companies","status":"publish","type":"post","link":"https:\/\/zawia3.com\/en\/spy-companies\/","title":{"rendered":"A Warning from the Buyer: Egypt Flags Israeli Spyware It Paid Millions to Use"},"content":{"rendered":"

On December 9, 2025, Egypt\u2019s National Telecom Regulatory Authority (NTRA), through its National Computer and Network Emergency Readiness Team (EG-CERT), issued an urgent warning<\/a> about sophisticated hacking attempts targeting smartphone users in more than 150 countries, including Egypt. It said the attacks exploited previously unknown vulnerabilities\u2014zero-days\u2014and used malicious links and messages appearing to come from trusted sources.<\/p>\n

The warning coincided with Google and Apple reports<\/a> concerning sophisticated commercial spyware, including Predator, associated with Intellexa, described in the investigation as an Israeli spyware company subject to US sanctions<\/a> for threatening global cybersecurity.<\/p>\n

Intellexa is one of the best-known \u201cmercenary spyware\u201d companies<\/a>, a term civil society and industry researchers use for private entities that develop spyware and sell it to governments.<\/p>\n

The irony is that Egyptian authorities had previously worked with the same company between 2019 and 2021, using tools such as Predator to monitor activists, politicians and human rights defenders, according to technical investigations<\/a> by Amnesty International and other organizations.<\/p>\n

\"Leaked
Leaked marketing brochure describing Intellexa\u2019s spyware capabilities. Amnesty International.<\/figcaption><\/figure>\n

A subsequent investigation<\/a> by Amnesty International, in collaboration with Inside Story<\/a>, Haaretz<\/a> and WAV Research Collective<\/a>, found evidence that Intellexa could remotely access customers\u2019 Predator systems, including systems physically located in government clients\u2019 offices. It could therefore access data belonging to people targeted by governments.<\/p>\n

Leaked internal documents<\/a> underscored this particularly serious finding: Intellexa\u2019s remote access extended even to systems at government premises, potentially exposing the information of people subjected to targeted surveillance.<\/p>\n

\"Screenshot
Screenshot of a leaked document showing \u201cAladdin,\u201d a zero-click infection system using a malicious advertisement and a public IP address. Amnesty International.<\/figcaption><\/figure>\n

The leaked files<\/a>, covering much of the company\u2019s recent history, provided additional technical and digital forensic evidence linking Predator\u2014Intellexa\u2019s flagship spyware\u2014to specific surveillance abuses previously detected in Greece and Egypt.<\/p>\n

\"Screenshot
Screenshot from a leaked internal training video showing Elasticsearch logs and information from a live Predator system. Amnesty International.<\/figcaption><\/figure>\n

Mahmoud Shalaby, Amnesty International\u2019s researcher on Egypt and Libya, says the organization has documented commercial spyware and digital attacks against human rights defenders, journalists and political activists in Egypt in recent years.<\/p>\n

He cites Egypt-linked campaigns using the Intellexa alliance\u2019s Predator and digital forensic evidence from 2020 and 2021 involving opposition figures and journalists.<\/p>\n

The 2021 Pegasus Project also found Egyptian activists\u2019 and journalists\u2019 phone numbers among potential targeting lists. Shalaby adds that Amnesty discovered a 2019 cyberattack against hundreds of people, including defenders working with Egyptian civil society organizations. They received emails attempting to access their accounts through a form of phishing known as OAuth phishing.<\/p>\n

Shalaby describes these unlawful practices as broad violations of privacy. He says the Egyptian government has used them to stifle public life and create self-censorship by tracking and intimidating defenders, journalists and anyone potentially involved in the public sphere.<\/p>\n

<\/svg><\/div>\n

Who is watching Egyptians?<\/h2>\n

Egypt has faced growing rights criticism<\/a> in recent years over expanding digital and legal surveillance<\/a> affecting privacy and freedom of expression through phones, the internet and social media, as well as the blocking of news websites.<\/p>\n

Nevertheless, parliament approved<\/a> Criminal Procedure Law amendments last year permitting prosecutors, with a reasoned authorization from a district judge, to monitor wired and wireless communications, social media accounts, email, text, voice and video messages on phones and technical devices; seize media containing them; or record private conversations. The provision concerns felonies or misdemeanors punishable by more than three months\u2019 imprisonment and allows a renewable maximum period of 30 days.<\/p>\n

A review of surveillance systems obtained by Egyptian authorities since 2013 reveals systematic expansion in purchases<\/a> of interception and digital spying technologies<\/a> from US, French, Italian and Israeli companies<\/a>.<\/p>\n

Systems including ProxySG<\/a>, Vortex, Cortex, Remote Control System<\/a>, Pegasus and Cerebro went beyond observing public content. They provided capabilities<\/a> to compromise personal devices, activate cameras and microphones, intercept encrypted communications and analyze behavior at scale.<\/p>\n

How communications are monitored in Egypt: imported digital surveillance systems<\/figcaption>
\n\n\n\n\n\n\n\n\n\n\n
System<\/th>\nCompany \/ country<\/th>\nUse in Egypt<\/th>\nAssessment in the Arabic graphic<\/th>\nSource<\/th>\n<\/tr>\n<\/thead>\n
ProxySG<\/td>\nBlue Coat (United States)<\/td>\nImported in 2013 to monitor web traffic and track content<\/td>\nFully accurate<\/td>\nAccess Now<\/a><\/td>\n<\/tr>\n
Vortex<\/td>\nErcom (France)<\/td>\nInterception of calls, SMS, internet and location since 2014<\/td>\nAccurate<\/td>\nSMEX<\/a><\/td>\n<\/tr>\n
Cortex<\/td>\nErcom (France)<\/td>\nStorage and processing of intercepted data<\/td>\nAccurate<\/td>\nSMEX<\/a><\/td>\n<\/tr>\n
Remote Control System (RCS)<\/td>\nNot directly specified; probably Hacking Team (Italy)<\/td>\nNot explicitly mentioned in reports about Egypt; used for remote control of devices<\/td>\nAccurate<\/td>\nAccess Now<\/a><\/td>\n<\/tr>\n
Pegasus<\/td>\nNSO Group (Israel)<\/td>\nZero-click phone compromise; camera and microphone activation; interception of encrypted communications<\/td>\nAccurate and documented since 2018<\/td>\nAccess Now<\/a><\/td>\n<\/tr>\n
Cerebro<\/td>\nNexa \/ Amesys (France)<\/td>\nComprehensive DPI surveillance covering calls, email, social media and search; transferred from the UAE to Egypt in 2017<\/td>\nAccurate<\/td>\nAccess Now<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>
Source: reports and unofficial sources, as identified in the Arabic graphic. Assessments reproduce the source graphic\u2019s wording.<\/figcaption><\/figure>\n

Digital surveillance means<\/a> observing and tracking citizens\u2019 digital activities\u2014calls, emails, instant messages or internet browsing\u2014to collect and analyze information about users\u2019 behavior. Digital monitoring and control<\/a> encompass technical and legal processes regulating content, observing traffic and analyzing patterns, including network management, interception and database analysis tools.<\/p>\n

An information technology specialist who requested anonymity told Zawia3 that tracking citizens involves collecting detailed information about individual behavior: websites visited, people contacted and search terms used.<\/p>\n

The potential legal problem, the specialist says, lies in the absence of clear legislation governing the relationship between the state and private companies operating these systems, placing personal data collection and behavioral monitoring in a legal gray area. Potential violations include infringements of privacy and telecommunications law, particularly without clear statutory authority or independent oversight safeguarding citizens\u2019 rights.<\/p>\n

Operation depends on hardware, software and personnel. Hardware stores and transmits data; software analyzes and classifies it; specialist staff operate networks and databases. Software may be local or imported, sometimes from companies indirectly linked to foreign states with possible political or security implications. This does not necessarily mean a direct national security threat exists, he cautions.<\/p>\n

Collected information includes metadata such as telephone numbers, IP addresses and call times; communications content where a legal basis exists; and browsing and application use. The investigation shows that systems presented as infrastructure or digital transformation projects enable extensive aggregation and analysis of citizens\u2019 information.<\/p>\n

The system is a chain of technical operations: collection, analysis and potential tracking of an individual\u2019s digital behavior, involving hardware, software and specialist operators. Without a clear legislative framework, these tools may be misused or remain in a gray area affecting privacy rights.<\/p>\n

<\/svg><\/div>\n

How do companies operate in Egypt?<\/h2>\n

Official, published contract information<\/a> shows private companies such as Raya<\/a> Information Technology and GTS acting as technical partners to public entities including Misr for Central Clearing and Telecom Egypt in network modernization and data center projects, forming the backbone of Egypt\u2019s digital infrastructure in cooperation with foreign companies.<\/p>\n

These companies are not accused here of directly conducting surveillance. Rather, their announced contracts, technologies and position within state digital infrastructure indicate a pivotal enabling role in surveillance systems without independent legislative oversight.<\/p>\n

Canadian company Sandvine was among the principal foreign suppliers<\/a> of deep packet inspection (DPI) equipment and technology to Egyptian internet providers, enabling authorities to monitor behavior and block websites.<\/p>\n

According to reports by Qurium<\/a>, Citizen Lab and the Association for Freedom of Thought and Expression<\/a>, the company\u2019s technology was used to train Egyptian employees<\/a> in monitoring communications and directing internet traffic, while allowing access to sensitive information<\/a> about citizens\u2019 digital activity.<\/p>\n

Software used to block independent media was detected in Egyptian networks, including traffic analysis and DPI. Reports cited in the investigation say at least 424 websites<\/a> were blocked in 2017, rising to more than 500 by 2019.<\/p>\n

Blocking continued through subsequent years and covered dozens of additional sites through 2025, bringing the total cited in the report to 600<\/a>. These include 126 news websites and television channels, proxy and VPN services, and rights and political websites.<\/p>\n

Amnesty International\u2019s Security Lab reported<\/a> on September 25, 2020 that German-made FinSpy had been used against activists and rights defenders through a fake Adobe Flash update. The campaign, known as NilePhish, targeted operating systems including Windows, macOS, Linux and Android.<\/p>\n

On February 29, 2024, the US Commerce Department imposed restrictions on Sandvine<\/a> by adding it to the Entity List, accusing it of selling<\/a> internet monitoring and website blocking tools to the Egyptian government.<\/p>\n

Rights groups welcomed the move, but it also raised questions about why this Canadian company was singled out while European and US firms continued supplying similar technologies.<\/p>\n

In September 2024, Sandvine announced<\/a> it would leave 56 countries it described as \u201cnon-democratic,\u201d specifically naming Egypt and promising to end business there by March 2025. It presented the move as a comprehensive reform to prevent abuse, alongside announcements of its CEO\u2019s departure, appointment of a human rights director and donations from future profits to internet freedom organizations.<\/p>\n

Observers regarded these measures as responses to an economic crisis and mounting political pressure rather than a genuine ethical transformation. Withdrawal does not dismantle existing systems, they argue, but leaves a gap other suppliers can fill.<\/p>\n

Documents and reports indicate Sandvine sales in Egypt exceeded USD 30 million since 2019, involving state bodies including NTRA and the Defense Ministry and major operators such as Vodafone Egypt and Telecom Egypt.<\/p>\n

One of its largest deals was a 2020 contract worth more than USD 10 million with Telecom Egypt, according to Bloomberg<\/a>. The relationship went beyond equipment sales<\/a> to operation, support and training, including preparing local staff to use network surveillance technologies.<\/p>\n

Although the company does not publish contract details or customer governments\u2019 names, its official website describes professional services<\/a> extending beyond equipment supply: installation, configuration, operation and end-user training, as well as resident support engineers for telecommunications operators and government clients.<\/p>\n

\"Excerpt
Excerpt from the contract model published on Sandvine\u2019s official website.<\/figcaption><\/figure>\n

Published support and service terms show that training in the operation of surveillance and network management products forms an integral part of commercial contracts.<\/p>\n

This model corresponds to independent technical reporting, including Qurium Media Foundation investigations<\/a> documenting Sandvine equipment in Egyptian internet provider networks used to systematically block media and rights websites through DPI. Qurium says observed blocking patterns indicate advanced network configuration, implying training and direct technical support rather than random use of tools.<\/p>\n

Citizen Lab analyses<\/a> at the University of Toronto similarly concluded that Egypt\u2019s surveillance and censorship infrastructure relied on centrally configured network-level systems, suggesting direct technical cooperation between suppliers and operators.<\/p>\n

Technical findings in Masaar and OONI reports<\/a> identified Sandvine\u2019s PacketLogic devices<\/a> in Egyptian networks for traffic analysis, connection rerouting, redirection and website blocking.<\/p>\n

The Canadian company\u2019s name is also associated with attempts to target opposition politicians\u2019 phones, including former parliamentarian Ahmed El Tantawy during the presidential election period in late 2023.<\/p>\n

A technical investigation<\/a> found a series of attacks against El Tantawy using Predator, which can record calls, activate cameras and microphones and monitor encrypted messages.<\/p>\n

The picture extends beyond one company. Egyptian authorities imported US company Blue Coat Systems\u2019 ProxySG<\/a> through local agent Systems Engineering of Egypt (SEE Egypt), in a procurement process that also included offers from Gamma Group and Narus, according to a technical report<\/a>. SEE Egypt is a major systems integrator with longstanding contracts with key state ministries.<\/p>\n

Other tools include France\u2019s Vortex and Cortex<\/a> for interception, Italy\u2019s Hacking Team<\/a> Remote Control System for remote compromise and surveillance, and Israel\u2019s Pegasus for smartphone spying.<\/p>\n

Authorities also used Amesys\/Nexa Technologies\u2019 Cerebro<\/a> for DPI-based communications surveillance, alongside projects such as a public opinion measurement system<\/a> monitoring social media activity.<\/p>\n

Observers say these tools enabled broad spying on calls, messages and correspondence; recording activity around devices; monitoring files and applications; and remotely activating microphones and cameras.<\/p>\n

ProxySG gives operators capabilities to monitor internet traffic<\/a> collectively, track users and approximate locations, filter content and block sites and applications, intercept messaging applications such as WhatsApp, Viber and Skype, and link behavioral analysis to identities.<\/p>\n

Technical investigations and rights reports<\/a> identified its use in Egypt after detecting false SSL certificates and widespread interception<\/a>, particularly after 2013. The investigation argues that this reflects infrastructure-wide surveillance rather than isolated actions or individual court orders.<\/p>\n

Authorities also turned to more intrusive tools targeting devices themselves, including Hacking Team\u2019s Remote Control System (RCS).<\/p>\n

In 2015, leaked internal company documents<\/a> revealed contracts with Egyptian authorities providing comprehensive spyware able to compromise computers and phones, monitor calls, texts, email and chat, activate cameras and microphones, log keystrokes, copy files and identify location.<\/p>\n

\"Leaked
Leaked material illustrating the spyware\u2019s capabilities.<\/figcaption><\/figure>\n

The leaks revealed a deal with Egypt\u2019s Defense Ministry worth EUR 598,000 and another worth EUR 58,000<\/a> with Egyptian company GNSE Group. Saudi General Intelligence\u2019s contract was estimated at EUR 600,000, and the UAE Interior Ministry\u2019s at EUR 634,000.<\/p>\n

RCS targets multiple operating systems, including Windows, Linux, macOS, Android, iOS and BlackBerry, marking a shift from network monitoring to direct control of personal devices.<\/p>\n

The investigation describes growing reliance on Pegasus, one of the world\u2019s most dangerous spyware products, developed by Israel\u2019s NSO Group. It cites technical reports dating from 2018<\/a> concerning use by the Egyptian government through malicious links or zero-click attacks exploiting unknown vulnerabilities, allowing compromise without the user\u2019s knowledge.<\/p>\n

NSO Group, also known as Q Cyber Technologies, was established in Israel in 2010<\/a> and develops and sells surveillance software to governments and intelligence services. Its June 2021 Transparency and Responsibility Report<\/a> listed 60 customers in 40 countries: intelligence agencies accounted for 51%, law enforcement for 38% and military bodies for 11%.<\/p>\n

NSO and Pegasus have been associated with extensive use by Arab governments<\/a> against journalists, activists, rights defenders and politicians inside and outside their borders. The company gained international prominence in 2016 when Citizen Lab exposed targeting<\/a> of Emirati human rights defender Ahmed Mansoor.<\/p>\n

Subsequent rights reports<\/a> documented Pegasus targeting in Palestine, Egypt, Jordan and other Arab countries. NSO also faced litigation in several jurisdictions<\/a>, including US cases brought by WhatsApp and Meta, judicial investigations in France, and actions by Apple and rights organizations concerning compromise of journalists\u2019 and defenders\u2019 devices.<\/p>\n

The surveillance landscape includes government projects as well as imported tools. Egypt\u2019s Interior Ministry announced its public opinion measurement system<\/a> in 2013 as a \u201csocial media security risks monitoring project.\u201d It could monitor Facebook, Twitter, YouTube and Instagram<\/a>, analyze text and keywords<\/a> and measure opinion trends, with scope to add platforms.<\/p>\n

Systems Engineering of Egypt won<\/a> the project over Britain\u2019s Gamma Group and Israel\u2019s Narus.<\/p>\n

<\/svg><\/div>\n

The hidden cost: millions in the shadows<\/h2>\n

Although digital surveillance contracts are not disclosed in detail, public budgets show substantial increases<\/a> in information systems development and cybersecurity allocations in recent years without identifying beneficiaries or technologies. Surveillance technology companies\u2019 investor reports<\/a> list government revenues in the Middle East and North Africa without naming countries, overlapping with independent findings identifying these systems in Egyptian networks.<\/p>\n

Surveillance contracts typically appear under broad budget headings such as telecommunications infrastructure development, securing national networks or supporting digital transformation rather than their actual names. These lines do not disclose contracted companies or services. The absence of a final total does not prevent estimates of the scale.<\/p>\n

Global market prices suggest DPI and network surveillance systems deployed in a country with tens of millions of internet users require investments of millions, sometimes tens of millions, of dollars.<\/p>\n

Internal documents reviewed by Bloomberg<\/a> show Sandvine sold advanced surveillance technology in Egypt worth more than USD 30 million since 2019, including a single Telecom Egypt deal exceeding USD 10 million. Separately, the investigation cites Hacking Team\u2019s 2015 leaks<\/a> as showing approximately EUR 137,500 spent on its spyware in Egypt.<\/p>\n

Egypt\u2019s 2025\/26 budget allocated about EGP 13 billion for public investment in communications and information technology, including about EGP 9 billion directly budget-funded for telecommunications infrastructure, cybersecurity and localization of IT and artificial intelligence.<\/p>\n

<\/svg><\/div>\n

How can surveillance software become a vulnerability?<\/h2>\n

A security researcher who requested anonymity told Zawia3 that advanced surveillance and spyware threaten not only privacy and activists but Egyptian national security itself. Exploiting unknown zero-day vulnerabilities can provide full access to smartphones without users\u2019 knowledge or consent.<\/p>\n

Once compromised, phones can transmit highly sensitive calls, messages, locations, photographs and files, and activate cameras and microphones at any time, the researcher says. This creates exposure for officials, military personnel, diplomats, journalists and employees of vital institutions, placing the state\u2019s broader information security at risk of invisible compromise.<\/p>\n

The risks multiply when the tools are associated with foreign companies, particularly Israeli firms such as NSO and Intellexa, operating in a politically and strategically complex relationship with Egypt.<\/p>\n

Mostafa Fouad, executive director of HuMENA, told Zawia3 that Egyptian authorities\u2019 tools fall into two tracks.<\/p>\n

The first operates at internet provider network level, enabling website blocking, disruption of circumvention tools and sometimes direct interference in browsing traffic. The second targets devices themselves, phones or computers, and is more dangerous for individuals because it compromises their equipment directly.<\/p>\n

Fouad cites Citizen Lab\u2019s documentation of Ahmed El Tantawy\u2019s targeting with Predator in 2023. Initial malicious links were followed by network injection into non-HTTPS connections on Vodafone Egypt\u2019s network.<\/p>\n

HuMENA is not a digital forensics laboratory and has a referral program with specialist partners rather than a \u201cdigital clinic,\u201d Fouad explains. Its ongoing work on civic space nevertheless allows it to follow public evidence and specialist reporting and relate these to real-world effects.<\/p>\n

This monitoring shows that blocking has been widespread and sustained since 2017. Techniques have become more complex, extending beyond individual URLs to alternative domains and multiple blocking layers across providers.<\/p>\n

Fouad also sees a clear shift from mass blocking to individual targeting. El Tantawy\u2019s case is an explicit example of commercial spyware used against a political figure, raising concerns that the approach could expand to journalists, defenders and opponents.<\/p>\n

Complete details of government suppliers are not available as published contracts, Fouad says, but specific names appear in technical and rights documentation and official decisions outside Egypt.<\/p>\n

Examples include Sandvine and Cytrox, Predator\u2019s developer associated with the Intellexa group.<\/p>\n

For Italian suppliers, Fouad recalls reporting after the 2015 leaks about a contract associated with Egypt\u2019s Defense Ministry and Hacking Team, involving local intermediary GNSE Group and an invoice dating from 2012.<\/p>\n

European rights reports and Italian organizations\u2019 statements in 2016\u201317 also described a license granted to Italy\u2019s Area SpA to export a communications and network surveillance system to Egypt\u2019s Technical Research Department (TRD) through a local intermediary. The license was suspended, with Italian authorities then moving to cancel or revoke it under rights pressure.<\/p>\n

Fouad describes these programs as grave violations of citizens\u2019 rights and international human rights standards. They form an integrated system on two parallel levels: widespread, systematic information blocking and direct technical interference reaching into individual privacy.<\/p>\n

Blocking hundreds of websites, including independent media, rights organizations and circumvention tools such as VPNs, undermines the digital public sphere and substantially restricts access to information, expression and circulation of opinions beyond narrow or exceptional legal justifications, he says.<\/p>\n

Traffic manipulation or hijacking unencrypted HTTP connections goes beyond administration or regulation. It directly interferes in users\u2019 communications and fundamentally affects their security and integrity.<\/p>\n

Targeted tools such as Predator and FinSpy represent the most severe intrusion: compromising an individual\u2019s device violates privacy, confidentiality of correspondence and personal life, while intimidating journalists, defenders and political opponents.<\/p>\n

Fouad says these practices directly contradict Egypt\u2019s international obligations to protect privacy and expression and its constitutional communications confidentiality safeguards, particularly without transparency, independent oversight or effective, testable avenues of appeal.<\/p>\n

On national security, Fouad identifies a dangerous paradox: tools of digital control create structural weaknesses within telecommunications infrastructure.<\/p>\n

\n

Equipment capable of manipulating traffic or redirecting users necessarily creates a \u201ccontrol point\u201d that can be exploited, compromised or abused, Fouad says.<\/p>\n<\/blockquote>\n

Citizen Lab\u2019s documentation of Predator network injection on a local network shows a capability that could theoretically have wider collective effects through poor management, counter-intrusion or leakage of the tools, Fouad says. Reliance on foreign suppliers and sensitive technology supply chains adds risks of leaks, backdoors or use by multiple parties outside meaningful accountability.<\/p>\n

He concludes that policies presented as \u201cprotection\u201d can weaken communications security, deepen digital infrastructure vulnerabilities and undermine trust in the entire digital public sphere.<\/p>\n

<\/svg><\/div>\n

The warning and the contradiction<\/h2>\n

NTRA\u2019s December 2025 warning officially acknowledged the scale of the threat from a defensive perspective. It warned Egyptians of sophisticated smartphone attacks and explicitly described spyware exploiting unknown vulnerabilities\u2014the same description used in Google and Apple reporting on Intellexa and Predator.<\/p>\n

\n

The state warning citizens about this software\u2019s dangers also operates within a telecommunications environment that, according to documented reports, has used surveillance tools from similar foreign companies. The contradiction highlights the risk that supposedly \u201csecurity\u201d technologies become a strategic vulnerability allowing outside powers into Egypt\u2019s digital space.<\/p>\n<\/blockquote>\n

Although purchases are justified by security considerations, technological dependence raises fundamental questions about digital sovereignty. Can a state protect national security using tools whose technical architecture it does not fully control? Can surveillance shift from domestic control to a potential channel for foreign intrusion?<\/p>\n","protected":false},"excerpt":{"rendered":"

Egypt\u2019s telecom regulator warns of sophisticated spyware while technical investigations document the state\u2019s use of foreign surveillance tools, raising questions about privacy, accountability and national security.<\/p>\n","protected":false},"author":4,"featured_media":15010,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"footnotes":""},"categories":[410],"tags":[],"kateb":[11853],"class_list":["post-16665","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-investigations-en","kateb-hisham-aref"],"jetpack_featured_media_url":"https:\/\/zawia3.com\/wp-content\/uploads\/2026\/02\/\u062a\u062c\u0633\u0633-2.png","_links":{"self":[{"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/posts\/16665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/comments?post=16665"}],"version-history":[{"count":1,"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/posts\/16665\/revisions"}],"predecessor-version":[{"id":16666,"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/posts\/16665\/revisions\/16666"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/media\/15010"}],"wp:attachment":[{"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/media?parent=16665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/categories?post=16665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/tags?post=16665"},{"taxonomy":"kateb","embeddable":true,"href":"https:\/\/zawia3.com\/en\/wp-json\/wp\/v2\/kateb?post=16665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}