Candreva used to work for Truel, which got bought by a spyware vendor called Variston in 2018. His LinkedIn says he worked there 2018-2022. Amnesty International discovered a hacking campaign using their spyware in the UAE, and Google wrote a blog post about it. https://blog.google/threat-analysis-group/spyware-vendors-us...
Bartoli has been a security researcher for a long time.