Transnational repression is the use of surveillance, harassment, hacking, or intimidation by a state or its proxies against people who live outside that state’s borders. The goal is to silence critics abroad, including dissidents, activists, journalists, and political opponents. In cyber security, this matters because the attack is not just about stealing data: it is about controlling people through their devices, accounts, and communications.
In practice, transnational repression can involve spyware, phishing, account takeover, location tracking, or impersonation to reach a target’s phone, inbox, or messaging apps. The information collected can expose sources, travel plans, family ties, and contacts, creating real-world risk. Defenders respond with strong device hygiene, secure messaging, account hardening, threat monitoring, and support for at-risk users. Treating trust as a security control is essential, because these campaigns often begin with social engineering rather than obvious malware.