European Lawmaker Probing Surveillance Targeted by Israeli Pegasus Spyware

IR SUMMARY — KEY POINTS

• Researchers at Citizen Lab confirmed that the mobile phone of former European Parliament member Stelios Kouloglou was compromised by Pegasus spyware at least three times.
• The targeted lawmaker was a key member of the PEGA Committee, which was specifically tasked with investigating illegal surveillance practices across European Union member states.
• This breach involved zero-click exploits that allowed an anonymous government client of the NSO Group to access private messages, sensitive documents, and camera functions.
• Stelios Kouloglou expressed shock at the audacity of the operation, labeling the hacking attempt against an active parliamentary investigator as a reckless act of intimidation.
• European institutions are now facing mounting pressure to enhance cybersecurity protocols and restrict the use of commercial surveillance technology within the regional legislative body.

A major security breach has sent shockwaves through the corridors of power in Brussels as experts reveal that a European lawmaker investigating surveillance abuses was himself targeted by military-grade spyware. Reports from the University of Toronto’s Citizen Lab confirm that the iPhone of former European Parliament member Stelios Kouloglou was compromised on multiple occasions during his tenure on the prestigious PEGA Committee. This committee was established to scrutinize the illicit use of surveillance tools across the European Union, making this specific digital intrusion a direct and aggressive challenge to the integrity of democratic parliamentary oversight.

Sophisticated Breach of Democratic Oversight

The Pegasus software, developed by the NSO Group in Israel, serves as a powerful surveillance tool capable of turning standard mobile devices into pervasive tracking machines. By utilizing a zero-click exploit that bypasses user interaction, the spyware grants operators complete access to a target’s microphone, camera, and private communications. The fact that an investigator actively probing these exact tools was targeted suggests a level of defiance that has stunned observers. Experts suggest the attacker likely intended to monitor the internal proceedings and private discussions of the legislative body as it gathered critical evidence.

While the identity of the specific government client remains unconfirmed, the methodology matches previous campaigns documented across Europe. Investigators at Citizen Lab observed that the attacks occurred while the lawmaker moved between Athens and Brussels, signaling a sophisticated tracking operation. The reuse of specific infrastructure associated with prior spyware campaigns indicates that the unidentified client acted with a degree of confidence that they would remain undetected. This incident highlights the profound vulnerability of political figures to sophisticated cyber-espionage conducted by state actors using private software products.

Weaponized Technology Targets Elected Officials

The PEGA Committee had been working for months to compile reports on how various nations across the continent deployed spyware against journalists, activists, and political opponents. By hacking a member of this very body, the perpetrators attempted to undermine the legitimacy of an inquiry that was already facing resistance from member state governments. This escalation marks a shift where surveillance technology is no longer just a tool for intelligence agencies, but a weapon used to intimidate those holding power accountable for human rights abuses and illegal domestic monitoring.

The NSO Group continues to assert that its products are sold exclusively to vetted intelligence and law enforcement agencies for combating serious criminal threats. However, this defense has faced relentless criticism following a series of high-profile revelations linking the company to the harassment of dissidents and elected officials. With the company already facing legal challenges from firms like Meta Platforms, this latest revelation provides additional ammunition to those demanding a total moratorium on the trade of commercial spyware within the European Union and beyond.

Industry Defenses Crumble Under Scrutiny

European institutions have scrambled to respond to the security failure, pointing to existing monitoring tools that remain insufficient against state-level cyber threats. While the European Parliament maintains that its security teams constantly monitor for potential breaches, the success of this operation highlights significant gaps in the protective measures afforded to elected representatives. Lawmakers are now demanding a more robust response from the European Commission, calling for stricter regulations that would force transparency upon the secretive spyware industry and its various government clients across the bloc.

The broader implications for digital security extend far beyond the walls of the European Parliament, touching upon the foundational privacy rights of every citizen. Public funds in countries like Italy and Spain have been linked to the financing of firms that manufacture these intrusive tools, creating a troubling paradox where taxpayer money supports technologies used to spy on public servants. Investigative journalists have spent years tracing these financial flows, uncovering a sprawling network of subsidies that effectively subsidize the very industry currently undermining the rule of law across the European continent.

Urgent Calls for Legislative Action

Legislators in Brussels are now poised to intensify their efforts to blacklist unregulated spyware vendors and demand full disclosure from member states regarding their acquisition of such technologies. The hacking of a sitting official serves as a clarion call, turning a previously technical debate into an urgent political struggle for the sovereignty of parliamentary institutions. Whether these efforts will succeed in curbing the reach of commercial spyware remains uncertain, but the audacity of this attack has irrevocably altered the landscape of political discourse surrounding modern cyber-espionage and national security protocols.