Investigation Compromised by the Very Tool It Was Meant
A cybersecurity audit by Romanian firm Sonda reveals that a former member of the European Parliament, who led the EU’s investigation into the Pegasus spyware, was himself infected with the same tool. The breach was uncovered in early June, raising doubts about the integrity of the parliamentary inquiry.
Latest news
European Bankers and Regulators Sound Alarm as AI Outpaces Existing Rules
German Coalition Approves Pension Overhaul and Tax Adjustments to Spur Growth
Christine Lagarde Signals Possible Early Exit from ECB Amid French Election Speculation
Trump slams NATO, calls US spending “ridiculous” on Truth SocialThe former MEP, who chaired the committee that examined allegations of illegal surveillance by Pegasus, had his mobile device infiltrated by the spyware during the investigation. Sonda’s technical analysis shows that the intrusion occurred through a malicious link sent to the lawmaker’s phone, enabling the NSO Group’s software to extract data. The finding suggests that the very instrument under scrutiny may have been used to monitor the investigators themselves, potentially skewing the committee’s work.
Sonda’s report details how the Pegasus infection was detected. Forensic experts traced unusual network traffic to known Pegasus command‑and‑control servers. The malware’s signature matched versions previously linked to high‑profile political targets. According to the firm, the breach likely happened weeks before the committee released its first findings, meaning that sensitive communications could have been intercepted.
Was the Parliamentary Probe Tainted?
The former MEP, who declined to comment publicly, had previously warned that Pegasus posed a grave threat to democratic institutions. „We must protect the privacy of our citizens and the independence of our investigations,” he said in a 2023 parliamentary speech. The revelation that his own device was compromised undermines that message and fuels speculation that the inquiry’s conclusions may have been influenced by external pressure.
Critics argue that the sabotage, if confirmed, could invalidate the committee’s reports and force a restart of the investigation. European officials have called for an independent review, emphasizing the need for transparent oversight of surveillance tools. „If the investigators were spied on, we cannot trust the outcomes,” a senior EU official told reporters.
The incident also spotlights the broader challenge of securing digital communications for public officials. As governments grapple with sophisticated spyware, the EU may consider stricter cybersecurity standards for its members. The scandal could accelerate legislative action to ban the export of surveillance technology and to impose harsher penalties on illicit users.
The fallout from Sonda’s findings is likely to reverberate throughout Brussels. Lawmakers may demand a full audit of the committee’s work, while civil‑society groups call for stronger protections for whistleblowers and journalists. The episode underscores the paradox of using a tool designed for covert surveillance to investigate its own misuse.
Frequently Asked Questions
What is Pegasus spyware? Pegasus is a sophisticated surveillance program developed by Israel’s NSO Group. It can infiltrate smartphones, read messages, record calls, and track location without the user’s knowledge.
How did Sonda discover the infection? The firm performed a forensic analysis of the former MEP’s device, identifying traffic to Pegasus servers and matching the malware’s code to known variants.
What are the next steps for the EU inquiry? European authorities plan to commission an independent audit of the committee’s work, review cybersecurity protocols for officials, and consider new legislation to curb the use of intrusive surveillance tools.
