PARIS: European politicians and media groups voiced outrage on Monday over reports that an Israeli firm supplied phone malware used by governments to spy on activists, journalists, lawyers and politicians in several countries.

The NSO Group and its Pegasus malware — capable of switching on a phone’s camera or microphone and harvesting its data — have been in the headlines since 2016, when researchers accused it of helping spy on a dissident in the United Arab Emirates.

A collaborative investigation by The Washington Post, The Guardian, Le Monde and other media outlets, based on a leaked list of 50,000 phone numbers, revealed the spying may have been far more extensive than previously thought.

The leaked numbers are believed to be connected to people identified by NSO clients as potential surveillance targets.

They include one linked to a murdered Mexican journalist and family members of murdered Saudi journalist Jamal Khashoggi.

European Commission chief Ursula von der Leyen said the spying, if confirmed, was “completely unacceptable”, while French government spokesman Gabriel Attal called it “extremely shocking.

UN rights chief Michelle Bachelet called for better regulation of surveillance technology and the head of Reporters Without Borders, Christophe Deloire, said the revelations provoked “shock and revulsion”.

It is unclear how many devices were actually targeted or surveilled and NSO has denied any wrongdoing.

But the claims that countries such as Azerbaijan, Hungary, India and Morocco, where authorities have cracked down on independent media, spied on dissident journalists at home and abroad sparked indignation.

The other countries that accounted for most of the numbers on the list were Azerbaijan, Bahrain, Kazakhstan, Mexico, Rwanda, Saudi Arabia and the United Arab Emirates.

French investigative news site Mediapart claimed that the phones of its founder Edwy Plenel and one of its journalists were among those targeted by Moroccan intelligence services and said it had filed a criminal complaint.

Morocco denied the claims, saying it “never acquired computer software to infiltrate communication devices”.

Pegasus is a highly invasive tool that can switch on a target’s phone camera and microphone, as well as access data on the device, effectively turning a phone into a pocket spy. In some cases, it can be installed without the need to trick a user into initiating a download.

NSO insists it is only intended for use in fighting terrorism and other crimes, and that any other use is the work of “rogue” operators — claims rubbished by Amnesty International.

“NSO’s spyware is a weapon of choice for repressive governments seeking to silence journalists, attack activists and crush dissent, placing countless lives in peril,” Amnesty International chief Agnes Callamard said in a statement.

“It’s clear its technology facilitates systemic abuse.” The Post said the numbers on the list were unattributed, but other media outlets participating in the project were able to identify more than 1,000 people in more than 50 countries.

They included several members of Arab royal families, at least 65 business executives, 85 human rights activists, 189 journalists and more than 600 politicians and government officials — including heads of state, prime ministers and cabinet ministers.

The investigation identified at least 180 journalists in 20 countries who were selected for potential targeting with Pegasus between 2016 to June 2021.

Among them were reporters for Agence France-Presse, The Wall Street Journal, CNN, The New York Times, Al Jazeera, El Pais, the Associated Press, Le Monde, Bloomberg, The Economist, and Reuters, The Guardian said.

Paranjoy Guha Thakurta, a veteran investigative journalist in India, said that Amnesty International had informed him that his phone and privacy had been “compromised” in 2018.

“It also puts my sources at risk. People who are speaking to you on condition of anonymity, if they get compromised, that’s terrible,” he said.

Published in Dawn, July 20th, 2021