Home » Latest » Transport Technology » A Multimillionaire Surveillance Dealer And His $9 Million WhatsApp Hacking Van | Forbes

A Multimillionaire Surveillance Dealer And His $9 Million WhatsApp Hacking Van | Forbes

4

InfoSearched 64 Transport Technology

8.5

SaveSavedRemoved 0

A Cyprus-based arms dealer built a van that can hijack your phone from 500 meters away.

Forbes reporter Thomas Brewster got something almost no outsider gets: a hands-on look inside the surveillance industry’s most secretive corner. His subject was Tal Dilian, a former commander in the Israel Defense Forces’ elite technological intelligence unit who now runs the surveillance alliance Intellexa and the spyware firm WiSpear out of Larnaca, Cyprus. Dilian’s calling card is a modified GMC van called the SpearHead 360, priced between $3.5 million and $9 million, that he demonstrated on camera for Forbes.

• The SpearHead 360 uses directional beam-forming antennas and Wi-Fi interception hardware to locate and target mobile phones within roughly 500 meters.
• Dilian showed the van forcing nearby smartphones to connect to rogue Wi-Fi access points automatically, without the phone’s owner doing anything.
• Once a phone connects, the system can inject spyware to extract data, track location in real time, and intercept encrypted WhatsApp traffic.

Inside the SpearHead 360

The vehicle Dilian showed Brewster isn’t a stripped-down surveillance van with a few antennas bolted on — it’s a rolling signals-intelligence lab. Millions of dollars in interception gear are packed into the GMC’s frame, all built around the idea that a target’s phone will do the hacking for you if you can just get it to talk to your equipment first. That’s the same category of tradecraft covered in outlets tracking 10 Most Insane Secret Military Technologies, where interception and signals gear built for state actors keeps trickling into private hands.

Dilian’s pitch to Forbes was straightforward: the SpearHead 360 lets an operator drive near a target — a suspected terrorist, a cartel figure, anyone of interest — and pull data off their phone without them ever noticing a thing changed.

Forcing Phones Onto Rogue Wi-Fi

The core trick is deceptively simple. The van’s hardware exploits how phones automatically search for and reconnect to known or open Wi-Fi networks, using beam-forming signals to make a rogue access point look irresistible to a nearby device. Once a phone connects, Dilian’s system doesn’t need the owner to click a malicious link or open a booby-trapped attachment — the connection itself is the opening.

From there, according to Dilian’s demonstration, the system can inject spyware payloads capable of extracting files, tracking GPS location continuously, and — critically — intercepting traffic from end-to-end encrypted apps like WhatsApp before encryption fully locks it down on the device.

A van that costs as much as $9 million, built to make a stranger’s phone connect to it from 500 meters away without the owner lifting a finger.

The Sales Pitch Versus the Privacy Fallout

Dilian framed the SpearHead 360 to Forbes as a tool for governments and law enforcement chasing genuinely dangerous targets — terrorist cells, drug cartels, organized crime networks that communicate on encrypted apps specifically to stay ahead of investigators. That’s the argument every commercial spyware vendor makes, and it’s not baseless: agencies really do lose visibility once a suspect moves to WhatsApp or Signal.

But Dilian also acknowledged on camera the obvious flip side — that a mobile-hacking van marketed at $3.5 to $9 million, sold to whichever government or agency can pay, comes with enormous potential for abuse. There’s no built-in check on who the “target” ends up being once the hardware leaves Larnaca. It’s the same tension running through The Five Laws of Cybersecurity | Nick Espinosa | TEDxFondduLac, where the tools built to secure systems are the exact same tools that compromise them in the wrong hands.

WhatsApp Encryption Has Security Limitations

WhatsApp’s end-to-end encryption is designed to make message content unreadable to anyone except sender and recipient, but Dilian’s demonstration is a reminder that encryption in transit doesn’t matter if the device itself is compromised before or after the message is decrypted on-screen. The SpearHead 360 doesn’t need to break WhatsApp’s math — it just needs the phone to connect to the wrong Wi-Fi network once.

Forbes didn’t get a price quote lower than $3.5 million, and Dilian never pretended this was consumer-grade gear — it’s built for governments with budgets to match. What Brewster’s report actually nails down is the mechanism: a rogue Wi-Fi handshake at 500 meters, not some exotic crack of WhatsApp’s encryption itself. That’s the detail worth remembering the next time a vendor claims to have “broken” an encrypted app.