There is a summary in the New York Times about how Governments Turn to Commercial Spyware to Intimidate Dissidents [nytimes.com]. The actual report is entitled Keep Calm and (Don’t) Enable Macros: A New Threat Actor Targets UAE Dissidents [citizenlab.org] published by the University of Toronto in Canada. The report details the companies and methods used to target journalists, activists, and dissidents so they can be removed and silenced. The bag of tricks includes fake web sites, documents with embedded macros, javascript, and even impersonation.