European Parliament Member Investigating Spyware Was Hacked With Pegasus

In a troubling development that underscores the pervasive threat of commercial spyware, a former Member of the European Parliament tasked with investigating spyware abuse has himself become a victim of the very technology he was examining. According to a recent report from Citizen Lab, Stelios Kouloglou, who served on the European Parliament's committee investigating the misuse of surveillance tools, had his mobile device repeatedly compromised using the notorious Pegasus spyware.

Citizen Lab's forensic analysis revealed that Kouloglou's device was targeted multiple times during his tenure on the investigative committee. The irony of this situation cannot be overstated—a policymaker specifically charged with overseeing the proper use of surveillance technology found himself under surveillance by those same powerful tools. This incident demonstrates the brazen confidence of entities deploying such spyware, even against high-profile political figures who are actively working to regulate their use.

The implications extend beyond the personal violation of an elected official. This breach potentially compromises the integrity of the European Parliament's investigative efforts and raises serious concerns about the security of other committee members and their sources. When those tasked with oversight become targets, it creates a chilling effect that could undermine democratic processes and accountability mechanisms.

For security teams, this case highlights several critical considerations. First, it demonstrates that even individuals with heightened security awareness remain vulnerable to sophisticated state-sponsored spyware. Second, it emphasizes the need for multi-layered defense strategies for high-profile targets, particularly those