An Israeli government probe into allegations of police spying on citizens using Pegasus malware on Monday said police successfully infected the phone of one individual subject to a court order.
The finding represents the first time the Israeli government has confirmed that the deeply controversial spy-ware — ostensibly developed by Israeli firm NSO Group as a counter-terror tool for government clients — has been deployed against a citizen of the Jewish state.
But the probe, backed early this month by Prime Minister Naftali Bennett, challenged allegations in Israeli business daily Calcalist that police had hacked the phones of dozens of Israelis who were not criminal suspects.
“There is no indication that the Israeli Police used the Pegasus system in its hands to infect, without a court order, a mobile phone from the list of people that was published in the press,” said the three-person investigation team, headed by Deputy Attorney General Amit Merari.
But “two people who were subject to a court order authorising tracking of computer communications were found,” and there was “an attempt at infection” in those two cases.
“The infection succeeded” in one of those cases, the investigation found.
Pegasus enables users to remotely activate a phone’s microphone and camera and suck up the data inside.
The US blacklisted NSO Group in November following a global investigation that revealed Pegasus has been used by repressive regimes to target journalists, dissidents, diplomats and others.
Israel itself was then rocked last month when Calcalist reported police used Pegasus on citizens, a claim police denied.
The newspaper said ex-advisors of former prime minister Benjamin Netanyahu, as well as his son Avner, senior leaders of government ministries and protest leaders figured among a list of 26 people targeted by police using the malware.
A key witness in an ongoing trial of Netanyahu for alleged corruption was one of those named as a target.
Prime Minister Naftali Bennett said the reported conduct was “unacceptable in a democracy”.
Calcalist said in an editorial Monday that the preliminary probe “requires serious consideration and a new check of the findings … published in Calcalist”, promising to undertake such a check.
Israeli public security minister Omer Bar Lev on Monday wrote on Twitter that the report was “a resounding acquittal for the Israeli police”.
Anat Ben-David, associate professor of communication at the Open University of Israel and co-founder of Privacy Israel, said the probe’s findings “refute the claims made by Calcalist about the infection of these individuals’ phones without a court order.”
However, she said, the report revealed that police had been using Pegasus, and that they appeared to be relying on court orders to authorise the spying.
Merari’s team said it will continue its probe to find whether Pegasus or other software was used without a court order on Israelis by extending the search beyond the 26 individuals listed by Calcalist.
She wrote that the probe will also examine whether police exceeded their authority in using spyware on citizens.
Related: FBI Confirms It Bought Spyware From Israel’s NSO Group
Related: Israeli Lawyer, Hungarian Rights Group Target Pegasus Spyware
Related: Google Says NSO Pegasus Zero-Click ‘Most Technically Sophisticated Exploit Ever Seen’

More from AFP
- Cyberattacks Target Websites of German Airports, Admin
- Meta Slapped With 5.5 Million Euro Fine for EU Data Breach
- International Arrests Over ‘Criminal’ Crypto Exchange
- France Regulator Raps Apple Over App Store Ads
- More Political Storms for TikTok After US Government Ban
- Meta Hit With 390 Million Euro Fine Over EU Data Breaches
- Facebook Agrees to Pay $725 Million to Settle Privacy Suit
- China’s ByteDance Admits Using TikTok Data to Track Journalists
Latest News
- Critical Vulnerability Impacts Over 120 Lexmark Printers
- BIND Updates Patch High-Severity, Remotely Exploitable DoS Flaws
- Industry Reactions to Hive Ransomware Takedown: Feedback Friday
- Microsoft Urges Customers to Patch Exchange Servers
- Iranian APT Leaks Data From Saudi Arabia Government Under New Persona
- US Reiterates $10 Million Reward Offer After Disruption of Hive Ransomware
- Cyberattacks Target Websites of German Airports, Admin
- US Infiltrates Big Ransomware Gang: ‘We Hacked the Hackers’
