EU Lawmaker Stelios Kouloglou Hacked with Pegasus Spyware During Investigation

Stelios Kouloglou, a former Member of the European Parliament, was hacked multiple times using Pegasus spyware while serving on the PEGA Committee investigating surveillance abuses. Citizen Lab confirmed that Kouloglou's phone was infected at least three times between October 2022 and March 2023, exploiting a zero-click vulnerability in Apple’s iPhone software. The first infection occurred on October 21, 2022, coinciding with intense committee activities and while Kouloglou was hospitalized. A second infection was detected on March 6 and 7, 2023, during critical discussions related to the committee's final report. The report indicates that the attacks were likely linked to a campaign targeting journalists and activists in Europe, but the specific perpetrator remains unidentified. Kouloglou expressed shock and anger over the breach, emphasizing its implications for democracy and security. The incident highlights the risks faced by lawmakers investigating spyware use.

Key Points: • Stelios Kouloglou was hacked multiple times with Pegasus spyware while investigating its use. • The attacks exploited a zero-click vulnerability in Apple’s iPhone software. • Citizen Lab's report marks the first public identification of a PEGA committee member as a spyware victim.