Spyware Pegasus revolutionized digital surveillance. By allowing security agencies to stealthily take full control of smartphones, it has made the hunt for criminals and terrorists easier. But research by an international research cooperation, in which ZEIT was also involved, has shown:
Pegasus has been abused en masse to restrict human rights, freedom and democracy. The spyware is linked to assassinations, vote-rigging and attacks on press freedom.
A lot has already been published on this, and it’s not a new topic on Piqd either: Jannis Brühl recently presented research for the Süddeutsche Zeitung.
ZEIT ONLINE is now publishing a six-part investigative podcast: “The Spy in Our Cell Phones”. Reporters from ZEIT report on their research into the spyware and provide insights into the precautionary measures that had to be taken. The victims include not only critical voices, even government members and heads of state in democratic countries are affected. The inventors of the software and their hunters also have their say.
Episode 1 is linked below. All episodes that appear on Thursdays through May 18 can be accessed here (approx. 30-40 min each).
#1 The Istanbul Plot – Just One Among Thousands
Murder of Saudi journalist Jamal Khashoggi
#2 smartphone years – Like the phoenix from the chicken coop
An Israeli start-up became a darling of the
secret services
#3 Customer Zero – The President and the Farmer’s Wife
Mexico was the first customer to make the spyware a success
Pegasus
#4 Among cyber diplomats
How Israel’s government used Pegasus to attract states to their
side to pull
#5 Eavesdropping in the heart of Europe
Even in the middle of Europe, Pegasus became fundamental rights
injured
Update:
At the meeting of the EP Committee of Inquiry into the Use of Pegasus and Similar Surveillance and Spying Software (PEGA) on 8 May 2023, the final report and recommendations were adopted. The latter is to be voted on at the parliamentary session beginning on June 12.
Die meeting documents were published in the official EU languages. The draft report (status: Nov 2022) comprises 61 pages, there were extensive amendments; see TOP 3.
The use of spyware in the EU is examined in detail. The use of Pegasus by the BKA would have violated German law, so a modified version with limited functionality was purchased in March 2021. The BKA and LKA Berlin also used spyware from FinFisher, a now-bankrupt Munich-based company that was the subject of a criminal investigation; see pp. 41, 51 f. Some questions remain unclear.
The analysis of the spyware industry and the EU’s possible responses (from p. 46) makes problems with EU regulation clear and states a “deliberately lax national implementation” by member states.
The EU is proving to be quite powerless against possible criminal acts by national authorities, even when they affect the EU. … Even if illegal or criminal behavior is proven, members of national governments cannot be charged or forced to resign from their EU posts. This means that those guilty of such acts can continue to sit with impunity in EU bodies and make decisions that affect all European citizens.
The misuse of spyware is condemned in the press release issued on the evening of the meeting. Their use should only be permitted under strict conditions. This requires a unified definition of national security. An EU Tech Lab could support research, investigations and forensic analysis. Systematic incidents of abuse in Poland and Hungary are under particular criticism. Concerns have been raised about their use in Greece and Spain.
On May 9th, PEGA chair Jeroen Lenaers and rapporteur Sophie In ‘t Veld held a press conference
(Video 36 min).
Netzpolitik.org gives a first reaction to this: “With kid gloves against state trojans”.