This was big news not that long ago. Pegasus spyware created by the Israeli NSO group.
They discover or buy zero day exploits and rather than telling the manufacturer about them they incorporate them into their software and sell to governments around the world
Pegasus was mainly about remote code execution but you can bet your bottom dollar they also have shit for opening phones in their posession