EU lawmaker investigating surveillance hacked by Israeli spyware, report says

Greek erstwhile parliamentarian Stelios Kouloglou targeted with Pegasus software, Citizen Lab investigation finds.

A erstwhile subordinate of the European Parliament was hacked with Pegasus spyware portion serving connected a committee investigating surveillance by the tool’s Israeli creator, a Canadian probe radical has found.

The iPhone of Greek investigative writer Stelios Kouloglou, who served arsenic an MEP from 2015 to 2024, was infected astatine slightest 3 times with Pegasus spyware successful 2022 and 2023, Citizen Lab said successful a study released connected Friday.

Recommended Stories

• list 1 of 4Khamenei’s coffin readied arsenic Iran prepares for seven-day funeral
• list 2 of 4Embolo, Ndoye usher slick Switzerland into the World Cup last-16
• list 3 of 4Delcy Rodriguez responds to nationalist choler astatine authorities response
• list 4 of 4Are Europe’s utmost summers the caller normal? What the subject says

The 3 incidents, which occurred portion Kouloglou was successful Athens and Brussels, coincided with the ex-parliamentarian’s clip connected a committee tasked with investigating the amerciable usage of Pegasus and different spying tools successful the European Union, according to Toronto-based Citizen Lab.

European lawmakers established the PEGA Committee successful 2022 pursuing revelations that governments successful the bloc had utilized Pegasus to show journalists, activists, politicians, and different citizens.

Kouloglou received Apple menace notifications astir imaginable Pegasus breaches aft the intrusions, but lone months aft each incident, according to Citizen Lab.

Kouloglou, who did not instantly respond to Al Jazeera’s petition for comment, requested that the probe radical behaviour a forensic probe of his telephone successful May.

Citizen Lab said successful its study that the incidental highlighted the “serious menace that mercenary spyware poses to the integrity of antiauthoritarian processes”.

“Whichever entity is liable for the hacking, the corruption could person exposed strictly confidential exchanges among PEGA Committee members and their staff, and different delicate and confidential parliamentary proceedings, including to parties nether probe by the Committee itself,” the study said.

Citizen Lab did not property the hacking to a peculiar government, but said it recovered nary grounds to suggest that the Greek authorities was responsible.

Pegasus, developed and sold by Herzliya-based NSO Group successful Israel, allows its relation to secretly instrumentality power of a target’s phone, allowing distant entree to a device’s messages, photos, contacts, camera and microphone.

While NSO Group markets Pegasus arsenic a morganatic instrumentality for instrumentality enforcement and quality agencies to people transgression groups, the spyware has besides been utilized to spy connected journalists, lawyers, dissidents, and authorities officials.

In 2021, NSO Group was blacklisted by the medication of United States President Joe Biden for acting “contrary to the overseas argumentation and nationalist information interests of the US”.

Last year, a US justice besides barred NSO Group from targeting the encrypted messaging app WhatsApp, arguing that its bundle causes “direct harm”.

NSO Group did not instantly respond to a petition for comment. The institution has antecedently said it cautiously vets buyers and that it has terminated contracts with users recovered to person abused the software.

The European Commission did not instantly respond to inquires.

Rand Hammoud, manager of the security, surveillance and quality rights programme astatine the Center for Democracy and Technology Europe, said the lawsuit should interest “everyone who cares astir democracy, cardinal rights, and the regularisation of instrumentality successful Europe”.

“The information that a subordinate of the European Parliament serving connected the PEGA Committee, the precise committee established to analyse spyware abuse, was reportedly targeted with Pegasus raises superior concerns astir the integrity of antiauthoritarian oversight itself,” Hammoud told Al Jazeera.

She described the cyberattacks arsenic portion of a “broader nonaccomplishment to efficaciously rein successful the commercialized spyware market”.

German MEP Hannah Neumann, who besides served connected the PEGA Committee, said the European Parliament should instantly analyse the breaches.

“Spyware doesn’t marque democracies safer,” Neumann said successful a station connected X. “It weakens antiauthoritarian oversight, parliamentary independency and the regularisation of law.”