Politician who investigated spyware abuses had his phone hacked with Pegasus spyware

Security experts have verified that a Greek journalist and former politician, Stelios Kouloglou, had his phone compromised by Pegasus spyware while he was a member of a committee examining the misuse of such surveillance technology. This incident has sparked renewed outrage over the potential misuse of spyware by governments to monitor critics. Researchers from the University of Toronto’s Citizen Lab revealed that Kouloglou’s hacking, confirmed to have occurred in 2022 and 2023, marks a significant moment as he is the first identified member of the European Parliament’s PEGA committee to fall victim to spyware. In a conversation with TechCrunch, Kouloglou described the breach of his phone as “reckless.” A current European lawmaker condemned the attack as a “direct assault on the rule of law” and urged the European Commission to enforce strict regulations governing the use of spyware throughout the 27-member bloc. While attacks on lawmakers are uncommon, the specific targeting of a committee investigator raises serious concerns about the scrutiny of the committee’s operations ahead of a crucial report detailing its findings. These hacks prompt crucial discussions about the balance between the necessity of spyware for combating serious crime and the potential for such tools to infringe on the privacy of journalists, legislators, and dissenters. Citizen Lab did not link the hacking to any particular nation but noted that the same Pegasus-infected email address used in Kouloglou's case had previously targeted journalists across Europe. Although the identity of the responsible government remains unknown, the reuse of this email suggests that the attackers had authorization from NSO Group, the company behind Pegasus, to surveil devices in various European nations. A representative from the European Commission did not comment on the matter when approached by TechCrunch, nor did NSO Group respond to inquiries regarding the Citizen Lab findings. In its latest report, Citizen Lab detailed that Kouloglou's phone was infiltrated in October 2022 and again in March 2023, utilizing an exploit that targeted a security vulnerability in Apple’s iPhone software. This flaw, although patched, had not been updated on Kouloglou’s phone, allowing the spyware to execute a “zero-click” attack, which meant it could access his data without any action from him. The initial hack in October coincided with critical discussions about spyware abuses in several countries, including Cyprus, Greece, Hungary, Poland, and Spain. Notably, it occurred while Kouloglou was hospitalized for a scheduled surgery, raising concerns that the spyware might have eavesdropped on sensitive conversations regarding his health. The subsequent hacks in March occurred during his travels from Athens to Brussels, coinciding with important committee hearings and discussions about the committee's upcoming report. In discussing the targeting, Kouloglou expressed his belief that his role in the investigation made him a specific target, revealing his frustration and concern over the breach of his private data. Kouloglou has announced plans to take legal action against NSO Group, which has faced significant backlash and restrictions, particularly in the United States, due to its association with human rights violations. He emphasized that sharing his experience is vital for promoting democracy, safeguarding human rights, and combating corruption, stating, “Corruption concerns everybody.”