Particle.news
Download on the App Store
11 ARTICLES
·
last wk.

EU Inquiry Member Hacked With Pegasus Spyware

Citizen Lab says a zero-click HomeKit exploit infected a PEGA committee member’s iPhone during key phases of the probe, a finding that experts say exposes gaps in parliamentary protection and EU policy.

Image
An Apple logo is seen at the entrance of an Apple Store in downtown Brussels, Belgium March 10, 2016. REUTERS/Yves Herman
BRUSSELS, BELGIUM - SEPTEMBER 8: Greek Member of the European Parliament (The Left group in the European Parliament - GUE/NGL Coalition of the Radical Left) Stelios Kouloglou is listening during a session of the Committee of Inquiry to investigate the use of Pegasus and equivalent surveillance spyware of the European Parliament on September 8, 2022 in Brussels, Belgium. Stélios Koúloglou is a journalist, writer and politician member of SYRIZA. According to experts, developed initially in North Macedonia, by the Cytrox company, then in Israel, the Predator spyware hacks the targeted phone, and can access the messages and conversations of its user. (Photo by Thierry Monasse/Getty Images)
Image

Overview

  • The University of Toronto’s Citizen Lab published a forensic report on July 3 confirming Pegasus spyware on the phone of Stelios Kouloglou, a substitute member of the European Parliament’s PEGA committee, and said this is the first public case of a sitting committee member being a confirmed victim.
  • Citizen Lab found Kouloglou’s device was infected at least twice during the inquiry, with incidents tied to October 21, 2022 and March 6–7, 2023, and identified the intrusion method as a zero-click HomeKit exploit later patched by Apple.
  • Investigators linked the attacks to operational signals used in earlier Pegasus campaigns, notably reuse of a Pegasus-linked email address and overlap with campaigns against Russian- and Belarusian-speaking exiles, but they did not publicly attribute the operation to any specific state.
  • The report warns the hacks could have exposed confidential PEGA deliberations and staff communications; Kouloglou said he will seek legal action against NSO Group and the European Parliament says it offers spyware scans and monitors threats for members.
  • MEPs and digital-rights experts say the case underscores persistent gaps in EU protections and is renewing urgent calls to implement PEGA recommendations, tighten export and vendor controls, and create stronger remedies for victims.