What is Spyware?

Spyware is technology developed for clandestine access to individual’s information. This report focuses on specific issues posed by intrusive spyware like Pegasus and not broader but still serious forms of digital surveillance.

What does Pegasus do?

Pegasus is a powerful and sophisticated surveillance tool. It gives its users the ability to hack into the mobile devices of others, to listen to conversations, access messages and digital files, activate camera and voice recording applications, and modify the content on a particular device. Users may enjoy unlimited access to all private communications and files stored on a target’s device. It is arguably the most powerful form of spyware for device intrusion.

Who created Pegasus?

Pegasus is developed by technology company NSO Group, based in Israel and selling to governments worldwide.

Who is using Pegasus, and against whom?

While NSO Group has repeatedly stated that it sells Pegasus exclusively to governmental agencies to help them fight terrorism, drug and sex trafficking, and other serious crimes, various investigations highlight the use of Pegasus software against journalists, scholars, and political dissidents.

How does it work?

Pegasus targets a particular device belonging to a particular person. It infects devices using a myriad of strategies such as placing a call to the device, phishing scams, and, most concerningly, “zero-click” attacks. Zero-click capability allows for the infection to occur without any actions or consent from the device owner. Therefore, surveillance victims may have no way of protecting their devices from such an intrusion. Additionally, the delayed detectability of zero-click exploits also delays the time by which serious misuses can be prevented.