{"id":3490647,"date":"2026-07-03T05:05:00","date_gmt":"2026-07-03T05:05:00","guid":{"rendered":"https:\/\/techingeek.com\/index.php\/2026\/07\/03\/politician-who-looked-into-spyware-misconduct-had-his-phone-compromised-with-pegasus-spyware\/"},"modified":"2026-07-03T05:05:00","modified_gmt":"2026-07-03T05:05:00","slug":"politician-who-looked-into-spyware-misconduct-had-his-phone-compromised-with-pegasus-spyware","status":"publish","type":"post","link":"https:\/\/techingeek.com\/index.php\/2026\/07\/03\/politician-who-looked-into-spyware-misconduct-had-his-phone-compromised-with-pegasus-spyware\/","title":{"rendered":"Politician who looked into spyware misconduct had his phone compromised with Pegasus spyware"},"content":{"rendered":"
<\/div>\n
\n

Investigators have verified that a politician from Europe experienced a breach of his phone using the Pegasus spyware while he was part of a committee examining the misuse of this infamous surveillance tool. This incident has sparked renewed debate regarding the misuse of spyware by governments to gather intelligence on their adversaries.<\/p>\n

The experts at The Citizen Lab, a digital rights unit based at the University of Toronto, report that the confirmed phone breach of Stelios Kouloglou, a Greek journalist and ex-politician, during 2022 and 2023 is the first instance of a member from the European Parliament\u2019s PEGA committee\u2014responsible for investigating phone spyware assaults by European states\u2014publicly recognized as a spyware victim.<\/p>\n

In a phone conversation, Kouloglou expressed to TechCrunch that the intentional infiltration of his phone was \u201cirresponsible.\u201d Another current European legislator described the hacking of Kouloglou\u2019s device as a \u201cdirect assault on the rule of law,\u201d urging the European Commission to enact firm regulations concerning the deployment of spyware within the 27-country coalition.<\/p>\n

Although instances of spyware intrusions targeting lawmakers are uncommon, the timing and specific targeting of a committee investigator via the very spyware he was scrutinizing indicates a heightened scrutiny of the committee’s internal processes prior to a much-anticipated report outlining its discoveries. The breaches raise new inquiries into the manner in which governments utilize spyware, ostensibly necessary for tackling severe crime, yet are found monitoring the communications of journalists, legislators, and dissidents.<\/p>\n

Citizen Lab\u2019s analysts did not pinpoint the phone intrusion to a particular nation but indicated that the government client employed the same Pegasus-enabled email account that had previously been used in a campaign that infiltrated the devices of reporters across Europe. The identity of the client remains unknown, but the recurrence of the same offensive email address suggests that the client had NSO Group\u2019s permission to deploy its Pegasus spyware to surveil phones across various nations in Europe.<\/p>\n

A representative from the European Commission did not reply to TechCrunch\u2019s inquiry for a statement. NSO Group also failed to respond to a request for comments regarding the Citizen Lab report before its publication.<\/p>\n

In a report released on Friday, Citizen Lab stated that Kouloglou\u2019s phone was compromised in October 2022 and at least twice during March 2023 by exploiting a vulnerability in Apple\u2019s iPhone software. Although this flaw had been patched, the update was not yet applied to Kouloglou\u2019s device. The method used was a \u201czero-click\u201d vulnerability, meaning the spyware infiltrated and extracted his information without any action required from him.<\/p>\n

The vulnerability exploited an existing flaw in Apple\u2019s smart home software utilized in iPhones. It enabled the spyware to retrieve sensitive information from Kouloglou\u2019s phone without his awareness, including text messages, other communications, geolocation data, and images.<\/p>\n

The timing of the October 2022 breach aligns with significant discussions via email and text during October and November 2022, leading up to the release of a preliminary draft focusing on spyware misuse in Cyprus, Greece, Hungary, Poland, and Spain.<\/p>\n

The infiltration also coincides with Kouloglou being hospitalized for a planned surgery, which may have permitted the spyware operatives to eavesdrop on surrounding conversations regarding his healthcare or other dialogues with visitors at that time.<\/p>\n

Months later, on March 6 and 7, Citizen Lab reported that Kouloglou\u2019s device was again accessed by the same Pegasus operator while he traveled from Athens to Brussels, during a critical period of committee hearings just prior to the committee finalizing and issuing their written draft report.<\/p>\n

In their conversation, Kouloglou indicated to TechCrunch that he was unsure why he was singled out but suspects it relates to his involvement in the European Parliament\u2019s committee scrutinizing Pegasus-related abuses.<\/p>\n

He expressed his indignation upon learning of the breach of his phone.<\/p>\n

\u201cYou realize that all of your personal data [was taken] \u2014 not only the professional exchanges or messages with ministers \u2014 but also the very private things, like the joyful moments and the sorrowful moments,\u201d he remarked to TechCrunch.<\/p>\n

Kouloglou intends to file a lawsuit against NSO Group, the Israeli-based spyware firm. NSO is largely prohibited from operation in the United States following an executive order during the Biden administration that banned the government\u2019s use of spyware that could infringe upon individuals\u2019 human rights.<\/p>\n

Last year, the spyware manufacturer acknowledged that an undisclosed American investment group invested tens of millions into the company, likely as part of efforts to restore NSO\u2019s tarnished reputation tied to facilitating human rights violations.<\/p>\n

Kouloglou stated he was going public with his experience \u201cfor democracy, human rights, and the battle against corruption.\u201d<\/p>\n

\u201cCorruption affects everyone,\u201d he asserted.<\/p>\n<\/div>\n

When you purchase through links in our articles, we may earn a small commission. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/div>\n
\n

Investigators have verified that a politician from Europe experienced a breach of his phone using the Pegasus spyware while he was part of a committee examining the misuse of this infamous surveillance tool. This incident has sparked renewed debate regarding the misuse of spyware by governments to gather intelligence on their adversaries.<\/p>\n

The experts at The Citizen Lab, a digital rights unit based at the University of Toronto, report that the confirmed phone breach of Stelios Kouloglou, a Greek journalist and ex-politician, during 2022 and 2023 is the first instance of a member from the European Parliament\u2019s PEGA committee\u2014responsible for investigating phone spyware assaults by European states\u2014publicly recognized as a spyware victim.<\/p>\n

In a phone conversation, Kouloglou expressed to TechCrunch that the intentional infiltration of his phone was \u201cirresponsible.\u201d Another current European legislator described the hacking of Kouloglou\u2019s device as a \u201cdirect assault on the rule of law,\u201d urging the European Commission to enact firm regulations concerning the deployment of spyware within the 27-country coalition.<\/p>\n

Although instances of spyware intrusions targeting lawmakers are uncommon, the timing and specific targeting of a committee investigator via the very spyware he was scrutinizing indicates a heightened scrutiny of the committee’s internal processes prior to a much-anticipated report outlining its discoveries. The breaches raise new inquiries into the manner in which governments utilize spyware, ostensibly necessary for tackling severe crime, yet are found monitoring the communications of journalists, legislators, and dissidents.<\/p>\n

Citizen Lab\u2019s analysts did not pinpoint the phone intrusion to a particular nation but indicated that the government client employed the same Pegasus-enabled email account that had previously been used in a campaign that infiltrated the devices of reporters across Europe. The identity of the client remains unknown, but the recurrence of the same offensive email address suggests that the client had NSO Group\u2019s permission to deploy its Pegasus spyware to surveil phones across various nations in Europe.<\/p>\n

A representative from the European Commission did not reply to TechCrunch\u2019s inquiry for a statement. NSO Group also failed to respond to a request for comments regarding the Citizen Lab report before its publication.<\/p>\n

In a report released on Friday, Citizen Lab stated that Kouloglou\u2019s phone was compromised in October 2022 and at least twice during March 2023 by exploiting a vulnerability in Apple\u2019s iPhone software. Although this flaw had been patched, the update was not yet applied to Kouloglou\u2019s device. The method used was a \u201czero-click\u201d vulnerability, meaning the spyware infiltrated and extracted his information without any action required from him.<\/p>\n

The vulnerability exploited an existing flaw in Apple\u2019s smart home software utilized in iPhones. It enabled the spyware to retrieve sensitive information from Kouloglou\u2019s phone without his awareness, including text messages, other communications, geolocation data, and images.<\/p>\n

The timing of the October 2022 breach aligns with significant discussions via email and text during October and November 2022, leading up to the release of a preliminary draft focusing on spyware misuse in Cyprus, Greece, Hungary, Poland, and Spain.<\/p>\n

The infiltration also coincides with Kouloglou being hospitalized for a planned surgery, which may have permitted the spyware operatives to eavesdrop on surrounding conversations regarding his healthcare or other dialogues with visitors at that time.<\/p>\n

Months later, on March 6 and 7, Citizen Lab reported that Kouloglou\u2019s device was again accessed by the same Pegasus operator while he traveled from Athens to Brussels, during a critical period of committee hearings just prior to the committee finalizing and issuing their written draft report.<\/p>\n

In their conversation, Kouloglou indicated to TechCrunch that he was unsure why he was singled out but suspects it relates to his involvement in the European Parliament\u2019s committee scrutinizing Pegasus-related abuses.<\/p>\n

He expressed his indignation upon learning of the breach of his phone.<\/p>\n

\u201cYou realize that all of your personal data [was taken] \u2014 not only the professional exchanges or messages with ministers \u2014 but also the very private things, like the joyful moments and the sorrowful moments,\u201d he remarked to TechCrunch.<\/p>\n

Kouloglou intends to file a lawsuit against NSO Group, the Israeli-based spyware firm. NSO is largely prohibited from operation in the United States following an executive order during the Biden administration that banned the government\u2019s use of spyware that could infringe upon individuals\u2019 human rights.<\/p>\n

Last year, the spyware manufacturer acknowledged that an undisclosed American investment group invested tens of millions into the company, likely as part of efforts to restore NSO\u2019s tarnished reputation tied to facilitating human rights violations.<\/p>\n

Kouloglou stated he was going public with his experience \u201cfor democracy, human rights, and the battle against corruption.\u201d<\/p>\n

\u201cCorruption affects everyone,\u201d he asserted.<\/p>\n<\/div>\n

When you purchase through links in our articles, we may earn a small commission. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n","protected":false},"author":2,"featured_media":3490648,"comment_status":"open","ping_status":"closed","sticky":false,"template":"Default","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3490647","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/posts\/3490647"}],"collection":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/comments?post=3490647"}],"version-history":[{"count":0,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/posts\/3490647\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/media\/3490648"}],"wp:attachment":[{"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/media?parent=3490647"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/categories?post=3490647"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techingeek.com\/index.php\/wp-json\/wp\/v2\/tags?post=3490647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}