Politician who investigated spyware abuses had his phone hacked with Pegasus spyware

A European politician serving on the PEGA committee investigating spyware abuses was confirmed to have his phone hacked with Pegasus spyware during 2022 and 2023, according to security researchers. The incident, which targeted a member involved in scrutinizing government surveillance practices, underscores ongoing concerns over the misuse of spyware tools like NSO Group’s Pegasus and the risks to democratic oversight.

Security researchers at the University of Toronto’s Citizen Lab confirmed that the politician’s phone was compromised using Pegasus spyware in October 2022 and again in March 2023. The hacking exploited a zero-click vulnerability in Apple’s iPhone software, allowing the spyware to steal private data without user interaction. The same attacker used an email address linked to previous European journalist hacks, suggesting a broader operation with possible government backing, though no specific country has been identified.

The targeted politician, who has not been named publicly, is a member of the European Parliament’s PEGA committee, which is tasked with investigating abuses of surveillance technology by European governments. The timing of the hacks coincides with discussions and draft reports on spyware misuse in several EU countries, raising questions about the extent of government surveillance and potential interference in oversight efforts.

Implications for European Surveillance Oversight

The hacking of a committee investigator highlights the potential risks faced by lawmakers scrutinizing surveillance practices. It demonstrates how spyware like Pegasus can be used to target critics and undermine democratic accountability. The incident also fuels ongoing debates over the legality and ethics of government use of spyware, especially when it is employed against journalists, politicians, and human rights advocates.

This case may influence EU policy discussions, prompting calls for stricter controls on spyware use and increased transparency around government surveillance activities. It also raises concerns about the security of digital communications for officials involved in sensitive investigations.

BERFY for iPhone 17 Case, Compatible with Magsafe, Black

• Privacy Screen Protection: Built-in privacy screen for security
• MagSafe Compatibility: Strong magnets for secure MagSafe charging
• Full-Body Rugged Protection: Dual-layer glass for 360° protection

View Latest Price

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Background on Spyware Abuse and European Investigations

Pegasus spyware, developed by NSO Group, has been linked to numerous reports of abuse, including targeting journalists, activists, and government critics across the globe. European lawmakers have been investigating these abuses through the PEGA committee, which aims to scrutinize the misuse of surveillance technology within the EU. In recent years, several European countries have faced allegations of using spyware against political opponents and journalists, prompting calls for greater oversight and regulation.

The confirmed hacking of the European politician’s phone aligns with prior incidents where Pegasus was used in Europe, notably in campaigns targeting journalists and critics. The reuse of a specific attack email address suggests a coordinated operation with potential state backing, though the exact actors remain unidentified.

“The hacking of this politician’s phone with Pegasus indicates a highly targeted operation, likely with government support, aimed at silencing or monitoring critics involved in surveillance oversight.”

— an anonymous researcher

Anti Spyware Detector

• Hidden Apps Detection: Identifies malicious or disguised apps
• Free Spyware Protection: Scans and removes dangerous spyware apps
• Apps Permission Management: Tracks and manages app permissions

View Latest Price

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Unclear Details About Perpetrators and Motives

While the hacking has been confirmed and linked to Pegasus, the specific government or actor responsible remains unidentified. The reuse of an attack email associated with previous European journalist hacks suggests a broader operation, but no official attribution has been made. It is also unclear whether the hacking was directly ordered by a government or carried out by private actors with government support.

Additionally, the full extent of data accessed and whether other officials were targeted remains unknown.

ZFD 50 Pack Privacy Phone Pouch Reusable PU Leather with Clear & Frosted Front No Photography Bag for Events and Confidential Meeting

• Complete 50-Pack Kit: Includes 50 privacy bags and management device
• Camera Blocking Design: Blurred top and back block cameras, clear center for access
• Soft, Reusable Material: PU leather protects phones from scratches

View Latest Price

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Next Steps in Investigating and Responding to the Hacking

European authorities and the PEGA committee are expected to review security protocols and consider measures to protect officials from future spyware attacks. The targeted politician plans to pursue legal action against NSO Group, the spyware manufacturer, and is calling for greater regulation of surveillance technology within the EU.

Further investigations are likely to focus on identifying the responsible actors and examining potential government involvement, alongside calls for tighter controls on spyware use across member states.

Key Questions

Who was targeted in the Pegasus hacking?

The targeted individual is a member of the European Parliament’s PEGA committee investigating spyware abuses. The person has not been publicly named.

What kind of vulnerability was exploited in the hacking?

The hackers exploited a zero-click vulnerability in Apple’s iPhone software, which allowed the spyware to install and steal data without any user interaction.

Has a specific country been identified as responsible?

No, the government or actor behind the hacking has not been officially identified. The attack used an email address linked to previous European journalist hacks, suggesting possible state involvement, but no definitive attribution has been made.

What legal actions are planned?

The targeted politician intends to sue NSO Group, the maker of Pegasus, and is advocating for stricter EU regulations on spyware use.

How does this affect European surveillance policies?

This incident raises concerns about government overreach and the need for stronger oversight and transparency regarding spyware use within the EU, potentially influencing future policy reforms.

Source: TechCrunch