What's happened
Kouloglou’s iPhone has been hacked at least three times with Pegasus spyware during 2022–2023, while he served on the PEGA Committee investigating spyware abuses in the EU. Citizen Lab’s report says the breaches used a now-patched Apple vulnerability; the attacker’s identity remains unclear. Kouloglou plans to sue NSO Group.
What's behind the headline?
Brief
- The report confirms that a European Parliament committee investigating spyware abuses has itself become the target of spyware attacks, raising questions about the integrity of the oversight process.
- The hacking incidents occurred while Kouloglou was serving on the PEGA Committee, highlighting a direct clash between investigative work and state‑level surveillance capabilities.
- The events suggest that mercenary spyware operators may be monitoring communications within political bodies, potentially exposing confidential exchanges between members and staff.
What’s behind the story?
- The Citizen Lab findings feed into a broader pattern of spyware abuse linked to NSO Group and similar vendors, intensifying scrutiny on who can access powerful surveillance tools and how they are deployed.
Forecast
- Expect renewed calls in Brussels for tighter controls on spyware sales and greater transparency around government access to digital intrusion capabilities.
- The PEGA Committee and EU bodies may accelerate cybersecurity reviews and adopt stricter screening for devices used in parliamentary work.
How we got here
Citizen Lab’s forensic work ties the incidents to 2022–2023, during Kouloglou’s tenure on the PEGA Committee. The committee’s mandate was to examine spyware abuses in the EU, including Pegasus and similar tools, and assess governments’ use of such software. The incident underscores ongoing concerns about democratic oversight and digital security for lawmakers across Europe.
Our analysis
Citizen Lab reports are cited by multiple outlets, including The New Arab, Al Jazeera, TechCrunch, and The Guardian, with Reuters and others providing context on responses from the European Parliament and NSO. The consensus highlights a growing concern that spyware tools threaten democratic processes rather than merely enabling law enforcement.
Go deeper
- What protections exist for lawmakers against targeted spyware?
- How will EU bodies respond to calls for tighter controls on spyware sales?
- Who might be behind the attacks, and what evidence would confirm it?
More on these topics
-
European Parliament
The European Parliament is one of three legislative branches of the European Union and one of its seven institutions. Together with the Council of the European Union, it adopts European legislation, normally on a proposal from the European Commission.
-
NSO Group - Surveillance company
NSO Group Technologies is an Israeli technology firm whose spyware called Pegasus enables the remote surveillance of smartphones. It was founded in 2010 by Niv Carmi, Omri Lavie, and Shalev Hulio. It employed almost 500 people as of 2017, and is based in
-
Stelios Kouloglou - Member of the European Parliament
Stelios Kouloglou is a Greek journalist writer and documentaries director. He is the creator of the news web channel "TVXS". Political analyst and major Greek publications columnist in international press including Le Monde Diplomatique.
-
Brussels-Capital Region - City and region of Belgium
Brussels, officially the Brussels-Capital Region, is a region of Belgium comprising 19 municipalities, including the City of Brussels, which is the capital of Belgium. The Brussels-Capital Region is located in the central portion of the country. It is...
-
Athens - Capital of Greece
Athens, is the capital and largest city of Greece. Athens dominates the Attica region and is one of the world's oldest cities, with its recorded history spanning over 3,400 years and its earliest human presence started somewhere between the 11th and 7th m
-
Israel - Country in the Middle East
Israel, formally known as the State of Israel, is a country in Western Asia, located on the southeastern shore of the Mediterranean Sea and the northern shore of the Red Sea.
-
Greece - Country in the Balkans
Greece, officially the Hellenic Republic, known also as Hellas, is a country located in Southeast Europe. Its population is approximately 10.7 million as of 2018; Athens, the nation's capital, is its largest city, followed by Thessaloniki.
-
The Guardian - Newspaper
The Guardian is a British daily newspaper. It was founded in 1821 as The Manchester Guardian, and changed its name in 1959. Along with its sister papers The Observer and The Guardian Weekly, The Guardian is part of the Guardian Media Group, owned by the S
-
University of Toronto - Public research university in the Greater Toronto Area of Ontario, Canada
The University of Toronto (U of T) is a public research university with three main campuses in the Greater Toronto Area of Ontario, Canada. Based on the grounds that surround Queen's Park in Toronto, it was founded by royal charter in 1827 as King's College, the provincial university of Upper Canada and its first institution of higher learning. Originally controlled by the Church of England, the university assumed its present name in 1850 upon becoming a secular institution. The university's three campuses are known as St. George, Mississauga, and Scarborough. Its large downtown Toronto location, St. George, is the oldest of the three and comprises 11 colleges, each with varying autonomy over financial and institutional affairs and significant differences in character and history. Its suburban campuses in the Toronto district of Scarborough to the east and city of Mississauga to the west were established in the 1960s, and together make up nearly half of the university's undergraduate student body. The University of Toronto is the largest post-secondary institution in Canada, with more than 100,000 students enrolled and over 720,000 alumni. It offers over 700 undergraduate and 200 graduate...
-
Pegasus - Software
Pegasus is a spyware developed by the Israeli cyberarms firm NSO Group that can be covertly installed on mobile phones running most versions of iOS and Android.
-
United States - Country in North America
The United States of America, commonly known as the United States or America, is a country mostly located in central North America, between Canada and Mexico.
-
Gaza - Wikimedia disambiguation page
Gaza most commonly refers to: Gaza Strip, a Palestinian territory on the eastern coast of the Mediterranean Sea Gaza City, a city in the Gaza Strip Gaza may also refer to:
-
Citizen Lab - Software developer
The Citizen Lab is an interdisciplinary laboratory based at the Munk School of Global Affairs at the University of Toronto, Canada.
-
Apple Inc. - Technology company
Apple Inc. is an American multinational technology company headquartered in Cupertino, California, that designs, develops, and sells consumer electronics, computer software, and online services.
-
European Union
The European Union is a political and economic union of 27 member states that are located primarily in Europe. Its members have a combined area of 4,233,255.3 km² and an estimated total population of about 447 million.