A member of the European Parliament (EP) special committee investigating the misuse of Pegasus spyware, developed by Israel-based NSO Group, became a target of the same software while the inquiry was ongoing.
According to a report by Citizen Lab, the Canadian cybersecurity research organization at the University of Toronto, the phone of Greek journalist and former MEP Stelios Kuloglu was hacked at least three times using Pegasus between October 2022 and March 2023.
The report stated that this is the first publicly confirmed case of a serving member of the committee investigating the use of Pegasus and similar spyware in Europe being directly targeted.
Risk of compromise of investigation documents
According to the investigation, the first breach occurred on 21 October 2022. At that time, the committee was preparing for critical sessions and draft reports were being circulated among members. The report's authors do not rule out the possibility that the attackers accessed investigation materials not yet made public.
In addition to accessing messages, documents and photos on the device, the attackers also had the ability to use the microphone and camera. The report stressed that the incident not only jeopardized the security of an MEP but also the confidentiality of the investigation conducted by the legislative body.
Citizen Lab called on EU institutions to conduct a thorough investigation, recommending that all members and staff of the committee be screened for possible spyware intrusions and that a joint mechanism be developed to protect European institutions from similar cyberattacks.
Kuloglu's role on the committee
Stelios Kuloglu served on the EP's special committee that investigated the use of Pegasus and other digital surveillance tools between March 2022 and July 2023. The committee examined allegations of illegal surveillance by European governments targeting journalists, politicians, activists and ordinary citizens.
Pegasus and NSO Group
Pegasus is considered one of the most advanced commercially available spyware products. Developed by Israel-based NSO Group, the software is claimed to be sold only to government agencies and licensed for use in countering terrorism and serious crime.
However, in recent years Pegasus has repeatedly surfaced in international investigations, with reports of its use to monitor journalists, opposition politicians, human rights defenders and civil society activists. NSO Group is currently under US sanctions.
