ADVERTISEMENT

Ex-EU Parliament lawmaker hacked with Pegasus

His committee mainly focused mainly on the use of Israel's Pegasus and similar tools.

Stelios Kouloglou, white elder greek man, black collar shirt, no tie, grey hair, dark blazer,

Former Greek Member of the European Parliament Stelios Kouloglou. Thierry Monasse/Getty.

Reuters
Jul 3, 2026 2 min read
Key takeaways:
  • A former EU lawmaker investigating spyware abuse was reportedly hacked using Pegasus spyware. This highlights risks faced even by officials probing surveillance abuses.
  • Citizen Lab says Stelios Kouloglou was targeted multiple times while serving on the European Parliament’s PEGA Committee. The committee was created to investigate illegal phone hacking in the EU.
  • The attack underscores concerns that mercenary spyware like Pegasus can be used against journalists, politicians, and activists. This raises questions about accountability and oversight.
  • NSO Group and other companies deny wrongdoing or say tools are used for security purposes. The case adds to ongoing global disputes over commercial spyware use.

Key Takeaways by nexos.ai, reviewed by Cybernews staff.

A former member of the European Parliament who served on a committee investigating abusive surveillance was himself hacked using an Israeli-made spy tool, a Canadian tech watchdog group said on Friday.

Citizen Lab said in a report that the phone of Stelios Kouloglou, a Greek television journalist-turned-lawmaker, was hacked at least three times between October 2022 and March 2023 using Pegasus spyware, a tool distributed by the Israeli company NSO Group.

At the time of the targeting, Kouloglou was serving on the European Parliament's PEGA Committee, which was set up in 2022 to examine the use of illegal phone hacking across the European Union.

The committee focused mainly on the use of Pegasus and similar tools, finding that governments across the EU likely used spyware, "in one way or another, some legitimate, some illegitimate."

More from Cybernews

sainsburys-facial-rec Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried? squatting ghost "Phantom squatting” uses AI hallucinated domains for cyber attacks physical media collection What they’re doing to gamers is a robbery in broad daylight The logo of Microsoft Teams, contours of shamrock Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it A UFO dissolving into an AI Can government AI actually scrub UAP footage from the internet? Apple CEO Tim Cook, right hand on heart, white male, grey white hair, left hand on heart The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe

Kouloglou said he was astonished at the audacity of whoever was behind the hacking.

"I was not expecting that a PEGA member would be spied on by Pegasus," he told Reuters. "I was not expecting that they would be as reckless as that."

Pegasus Israel flag

NSO did not return messages seeking comment.

In a statement to Reuters, the European Parliament did not directly address Kouloglou's case but said its IT security services "constantly monitor cybersecurity threats as well as potential cyberattacks against its working environment."

It said spyware screening tools had been available to all lawmakers since 2022 and that a report adopted last month called for their extension to all devices used for parliamentary business.

The European Commission, the European Union's executive branch, did not immediately return messages seeking comment.

ADVERTISEMENT
EU flags
Image by Yves Herman | Reuters

NSO has said its spy tools are used to police serious crime and to protect national security, but the company has repeatedly been accused of facilitating intrusive surveillance of journalists, political opponents, civil rights activists and religious figures around the world.

NSO was blacklisted by the US government in 2021 over human rights and national security concerns. Last year, WhatsApp owner Meta Platforms won a $168 million damages award against NSO for unlawfully hacking the platform, although the award was significantly reduced.

Last month, Meta accused NSO of violating the court's injunction on targeting its services and filed for a contempt order.

Citizen Lab said it believed that Kouloglou had been hacked through a vulnerability in Apple software that was not known at the time. It said Kouloglou received repeated warnings about state-sponsored hacking attempts from Apple in 2023 and 2024.

Citizen Lab did not identify who actually used Pegasus to target the former lawmaker, but it linked some of the hacking activity to earlier discoveries that Pegasus was used to spy on Russian- and Belarusian-speaking journalists and activists in exile.

Apple did not directly address questions about Kouloglu, but said the vulnerability referred to in the Citizen Lab report had since been patched and that it regularly issued alerts to hacking targets.

Sophie in 't Veld, a former EU lawmaker who championed the PEGA committee's creation, said the hacking of Kouloglou's phone showed how the spread of mercenary spyware had created a surveillance free-for-all.

"We're in a situation where anybody could spy on anyone and they're spying on citizens, they're spying on journalists, they're spying on NGOs, on lawyers, on politicians, and nobody knows who's behind it," she said.

ADVERTISEMENT