Citizen Lab researchers have revealed that Stelios Kouloglou, a former Member of the European Parliament who served on a committee investigating spyware abuse, had his iPhone repeatedly hacked with Pegasus spyware during his tenure in 2022 and 2023. Forensic analysis found the attacks exploited a zero-click vulnerability in Apple's HomeKit software, potentially giving attackers access to confidential documents and committee deliberations. While no specific government has been attributed responsibility, Citizen Lab identified an overlap with a separate campaign targeting Russian and Belarusian-speaking journalists and activists in Europe, suggesting a Pegasus operator licensed to conduct surveillance across multiple EU countries was likely responsible.
