European Parliament Member Investigating Spyware Was Hacked With Pegasus

Summary: Citizen Lab reported that former European Parliament member Stelios Kouloglou had his iPhone compromised with Pegasus spyware on or around October 21, 2022, and again on March 6 and 7, 2023, while he served on the PEGA Committee investigating commercial spyware. The researchers assessed that a zero-click exploit in Apple's smart home software, codenamed PWNYOURHOME and fixed in iOS 16.3.1, delivered the spyware, and tied the first infection to a prior campaign against Russian and Belarusian-speaking exiled journalists and activists in Europe through the shared email address rauharepo888@gmail.com.
Why it matters: A lawmaker tasked with investigating spyware abuse had his confidential documents and committee deliberations exposed, and Citizen Lab's finding that the operator held a license covering multiple EU jurisdictions narrows the list of Pegasus customers who could be responsible.

Read the original at The Hacker News ↗