This is just using FinFisher/Spy malware to turn on the mic it's in their advertisement that was leaked by Wikileaks to youtube. Typically deployed as a fake up

This is just using FinFisher/Spy malware to turn on the mic it's in their advertisement that was leaked by Wikileaks to youtube. Typically deployed as a fake update or some other popup screen the user has to agree too. They could also use Playstore to download/install whatever apps they wanted and unlock the phone if Google cooperates with investigations (they probably do) without needing your approval. Another method would be to send binary OTA SMS messages to the carrier's closed simcard and turn on the mic, or camera, or ping it with type 0 sms so everytime your sim ackknowledges they can track you regardless of gps being disabled.