Researchers from the University of Toronto have confirmed that Stelios Kouloglou, a former member of the European Parliament, was targeted by Pegasus surveillance software while serving on an investigation committee.

多倫多大學的研究人員證實，前歐洲議會議員 Stelios Kouloglou 在調查委員會任職期間，被 Pegasus 監視軟體針對。

The technical analysis by Citizen Lab shows that Mr. Kouloglou's device was hacked on two separate occasions: October 2022 and March 2023. The attackers used a 'zero-click' method, which means they exploited a weakness in Apple's smart home software without the user needing to click any link. Because the device had not been updated with the latest security patch, the software was able to steal private messages, location data, and record audio from the surroundings.

Citizen Lab 的技術分析顯示，Kouloglou 先生的裝置在 2022 年 10 月和 2023 年 3 月兩次被入侵。攻擊者使用了「零擊」方法，也就是利用 Apple 智慧家庭軟體的漏洞，使用者無需點擊任何連結即可被入侵。由於裝置未更新最新的安全補丁，該軟體能夠竊取私人訊息、位置數據並錄製周圍的音訊。

These attacks happened at critical times for the PEGA committee. The first hack occurred while the committee was drafting a report on spyware use in countries like Greece and Poland. The second attack in March 2023 happened just as the committee was finishing its final report and holding hearings in Brussels. Consequently, it appears the attackers wanted to steal secret discussions and confidential parliamentary documents.

這些攻擊發生在 PEGA 委員會的關鍵時刻。第一次入侵發生在委員會起草一份關於希臘和波蘭等國家使用監視軟體報告期間。第二次攻擊於 2023 年 3 月發生，當時委員會正準備完成最終報告並在布魯塞爾舉行聽證會。因此，看來攻擊者想要竊取秘密討論內容和機密的議會文件。

Although Citizen Lab did not name a specific government as the attacker, they found that the email address used in the attack was also used to target Russian and Belarusian journalists. This suggests that a customer of the NSO Group, the company that makes Pegasus, was responsible. While the NSO Group has not officially responded, the company is currently restricted by a US executive order due to human rights concerns.

雖然 Citizen Lab 未指名特定政府為攻擊者，但他們發現攻擊中使用的電子郵件地址也曾被用於針對俄羅斯和白俄羅斯記者。這顯示 NSO Group（製作 Pegasus 的公司）的一名客戶應為責任方。雖然 NSO Group 尚未正式回應，但該公司目前因人權疑慮而受到美國行政命令的限制。

Mr. Kouloglou plans to take legal action against the NSO Group. Meanwhile, this incident has led to demands for the European Commission to create stricter rules to limit the use of spyware within the EU.

Kouloglou 先生計劃對 NSO Group 採取法律行動。同時，此事件促使各界要求歐盟委員會制定更嚴格的規則，以限制在歐盟內部使用監視軟體。