Researchers from the University of Toronto have verified that Stelios Kouloglou, a former member of the European Parliament, was targeted by Pegasus surveillance software during his tenure on an investigatory committee.

多倫多大學的研究人員已證實，前歐洲議會議員 Stelios Kouloglou 在調查委員會任職期間，曾被 Pegasus 監視軟體鎖定目標。

The forensic analysis conducted by Citizen Lab indicates that the device belonging to Mr. Kouloglou, a substitute member of the PEGA committee, was compromised on two distinct occasions: October 2022 and March 2023. The technical mechanism employed was a 'zero-click' exploit targeting a vulnerability in Apple's smart home software; the success of this intrusion was facilitated by the absence of a current software patch on the target device. This capability permitted the unauthorized extraction of private correspondence, geolocation data, and ambient audio recordings.

Citizen Lab 進行的法醫分析顯示，PEGA 委員會候補委員 Kouloglou 先生的裝置在 2022 年 10 月與 2023 年 3 月這兩個截然不同的時間點被入侵。所採用的技術機制是一種針對 Apple 智慧家庭軟體漏洞的「零擊（zero-click）」漏洞攻擊；由於目標裝置缺乏目前的軟體補丁，促成了此次入侵的成功。此功能允許未經授權地提取私人通訊、地理位置數據以及環境音訊錄音。

Chronologically, these intrusions align with critical phases of the PEGA committee's operations. The initial compromise occurred during the formulation of a draft report focusing on spyware utilization in Cyprus, Greece, Hungary, Poland, and Spain, and immediately preceded fact-finding missions to Greece and the Greek Cypriot Administration. The subsequent infection in March 2023 coincided with the finalization of the committee's written report and hearings in Brussels. Such timing suggests a strategic intent to acquire non-public deliberations and confidential parliamentary documentation.

從時間順序來看，這些入侵與 PEGA 委員會運作的關鍵階段相吻合。首次入侵發生在擬定一份關注賽普拉斯、希臘、匈牙利、波蘭和西班牙使用監視軟體草案報告期間，且緊接在前往希臘和塞浦路斯行政當局進行事實調查任務之前。隨後於 2023 年 3 月的感染則與委員會書面報告的定稿及在布魯塞爾舉行的聽證會同時發生。這樣的時機顯示出獲取非公開討論內容和機密議會文件的戰略意圖。

Regarding attribution, Citizen Lab has not identified a specific state actor. However, the observation that the attacking email address corresponds to a previous campaign targeting exiled Russian and Belarusian journalists suggests the involvement of a Pegasus customer with multi-jurisdictional authorization from the NSO Group. While the NSO Group has not provided a formal response to these findings, the organization remains subject to a United States executive order restricting its use due to human rights concerns, despite recent capital infusions from an American investment entity.

關於歸屬分析，Citizen Lab 尚未確認特定的國家參與者。然而，觀察到攻擊用的電子郵件地址與先前針對流亡俄羅斯和白俄羅斯記者的行動相符，這表明一名獲得 NSO Group 跨司法管轄區授權的 Pegasus 客戶參與其中。儘管 NSO Group 未對這些發現提供正式回應，但由於人權考量，該組織仍受美國一項限制其使用的行政命令約束，儘管近期獲得了一家美國投資實體的資本注入。

Mr. Kouloglou intends to initiate legal proceedings against the NSO Group, while the incident has prompted calls for the European Commission to implement stringent regulatory constraints on spyware usage within the union.

Kouloglou 先生打算對 NSO Group 提起法律訴訟，而此事件也促使各界呼籲歐盟委員會對歐盟內部的監視軟體使用實施嚴格的監管限制。