A technical analysis by Citizen Lab has confirmed that Stelios Kouloglou, a former Member of the European Parliament (MEP), was targeted by Pegasus spyware. This happened while he was serving on a committee investigating the illegal use of surveillance tools.

Citizen Lab 的技術分析確認，前歐洲議會議員 Stelios Kouloglou 成為了 Pegasus 監控軟體的目標。當時他正於一個調查非法使用監控工具的委員會任職。

The attacks occurred while Mr. Kouloglou was part of the PEGA Committee, which was created in 2022 to study how mercenary spyware violates European Union law. Forensic data shows that his device was hacked on October 21, 2022, and again in March 2023. These dates are important because they match the time the committee was writing reports and holding high-level meetings. Interestingly, the first infection happened while he was in the hospital and in contact with a journalist who had also been targeted by similar software in Greece.

這些攻擊發生在 Kouloglou 先生擔任 PEGA 委員會成員期間，該委員會於 2022 年成立，旨在研究僱傭監控軟體如何違反歐盟法律。鑑識數據顯示，他的裝置在 2022 年 10 月 21 日及 2023 年 3 月被入侵兩次。這些日期至關重要，因為正值委員會撰寫報告及舉行高層會議的時間。有趣的是，第一次感染發生在他住院期間，而當時他正與一名在希臘同樣被類似軟體盯上的記者接觸。

Regarding who was responsible, Citizen Lab did not name a specific government, and they found no evidence that the Greek government was involved. However, researchers found a technical link—a specific Apple ID email—connecting these attacks to a campaign targeting seven Russian and Belarusian activists. This suggests the attacker had the ability to operate in both Greece and Belgium. The Pegasus software, created by the Israeli company NSO Group, allows users to remotely access almost all data on a device. Consequently, the U.S. government has previously blacklisted NSO Group for security reasons.

關於誰該負責，Citizen Lab 並未指名特定政府，且未發現希臘政府參與的證據。然而，研究人員發現了一個技術關聯——一個特定的 Apple ID 電郵——將這些攻擊與一場針對七名俄羅斯及白俄羅斯活動人士的行動聯繫在一起。這顯示攻擊者有能力在希臘與比利時兩地操作。Pegasus 軟體由以色列 NSO Group 公司開發，允許用戶遠端訪問裝置中幾乎所有數據。因此，美國政府先前因安全理由將 NSO Group 列入黑名單。

Several MEPs, including Hannah Neumann and Saskia Bricmont, emphasized that these breaches are an attack on the rule of law and the integrity of parliament. There is a strong concern that the attacker may have accessed confidential discussions and internal reports. Furthermore, although the committee recommended creating a specialized EU forensic lab and a task force to protect elections, these measures have not yet been put into action by the authorities.

包括 Hannah Neumann 與 Saskia Bricmont 在內的數名歐議會議員強調，這些入侵是對法治與議會完整性的攻擊。各界深感憂慮攻擊者可能已接觸到機密討論與內部報告。此外，儘管委員會建議成立一個專門的歐盟鑑識實驗室及一個保護選舉的專案小組，但這些措施尚未被當局採取。

This incident highlights a serious security weakness within European legislative institutions and shows a lack of a strong response to the spread of mercenary spyware.

此事件凸顯了歐洲立法機構內部嚴重的安全漏洞，並顯示出在面對僱傭監控軟體泛濫時，缺乏強而有力的應對措施。