A new digital forensic report has triggered fresh concerns in Europe after claiming that the mobile phone of former European Parliament member and veteran journalist Stelios Kouloglou was repeatedly compromised using Pegasus spyware.

The alleged hacking is significant because Kouloglou was serving on the European Parliament’s PEGA Committee, which was investigating the alleged misuse of Pegasus and other spyware tools across Europe.

Attacks Allegedly Took Place During Key Committee Work

According to the report, the first signs of Pegasus infection were detected on Kouloglou’s mobile phone on 21 October 2022.

At that time, the PEGA Committee was preparing its first major report on spyware use within Europe.

Further Pegasus-related activity was reportedly detected on 6 and 7 March 2023, when the committee was holding intensive discussions to finalise its findings.

Investigators noted that the timing of the alleged attacks aligned with important stages of the committee’s work.

Operator Not Conclusively Identified

The forensic report does not conclusively identify the government, agency or operator behind the alleged cyberattacks.

However, investigators said certain digital indicators resembled an earlier espionage campaign targeting exiled Russian and Belarusian journalists and opposition activists living in Europe.

The report suggests that the same operator, or another actor using similar technical infrastructure, may have been involved.

Pegasus Remains One of the Most Controversial Spyware Tools

Pegasus is an advanced spyware developed by Israeli cyber-intelligence company NSO Group.

The company has maintained that its software is sold only to authorised government agencies for investigating terrorism and serious crime.

However, Pegasus has repeatedly been linked to allegations involving surveillance of journalists, opposition leaders, activists, lawyers and public officials.

European Parliament’s PEGA Committee Was Formed in 2022

The European Parliament created the PEGA Committee in 2022 after global revelations raised concerns over spyware misuse.

The committee examined whether spyware had been deployed lawfully within European Union member states or misused in ways that violated democratic rights, privacy protections and legal safeguards.

As part of its work, the committee heard testimony from experts, journalists, technical researchers and alleged surveillance victims.

Zero-Click Spyware Raises Security Risks

Cybersecurity researchers warn that modern spyware can compromise devices without requiring the victim to click a malicious link or download an infected file.

Such zero-click attacks can silently access sensitive data, communications and device activity.

High-risk individuals such as lawmakers, journalists, government officials and investigators are advised to use updated software, encrypted communication, regular forensic checks and strict mobile security practices.

Organisations handling sensitive investigations can also strengthen digital risk controls through cybersecurity reviews and auditing services in india, especially where confidential communication, legal evidence and institutional data are involved.

Conclusion

The alleged targeting of a former European Parliament member investigating spyware misuse raises serious questions about surveillance, accountability and democratic safeguards.

While the responsible operator has not been conclusively identified, the case reinforces the urgent need for stronger mobile security, independent digital forensic assessments and transparent oversight of spyware technologies.

Shunyatax Global Insight

Advanced spyware threats show that cyber risk is no longer limited to corporations or financial institutions. Democratic bodies, journalists, lawmakers and investigators handling sensitive public-interest matters are increasingly exposed to invisible surveillance technologies.

Shunyatax Global believes institutions must treat cybersecurity as a governance priority. Independent auditing services in india, digital forensic reviews, access-control testing and secure communication audits can help organisations identify vulnerabilities, protect confidential information and build stronger resilience against advanced surveillance threats.