NSO has carried out 'unlawful' surveillance to target Amnesty staff members, HRDs

Counterview Desk
Following the exposure that Israeli spyware Pegasus, manufactured by NSO Group, has been used as a surveillance tool on smartphones used by about 1,500 human rights defenders (HRDs), journalists and activists, including in India, the top rights body, Amnesty International India, has appealed to those who have received a notification immediately to get in touch with Amnesty Tech at share@amnesty.tech for support.

An Amnesty release on November 2 said that the rights body could also be contacted “on Signal or WhatsApp at +44 7492 882216”, adding, “We would be keen to provide support to HRDs, who have been targeted, to ensure they take defensive security measures immediately, as well as to understand more about the attacks and investigate possible infections.”

Meanwhile, Amnesty has put out questions and answers for HRDs, activist, or journalist based in India to understand NSO Group’s spyware Pegasus especially the WhatsApp targeting.

Text:

Q: What do we know about the NSO Group and its ‘Pegasus’ Spyware?

A: ‘NSO Group’ is an Israeli spyware manufacturer that claims to sell its surveillance tools – the most well-known being its Pegasus spyware – exclusively to governments and government agencies ‘to combat terror and crime’.

Its products have been misused multiple times to conduct unlawful surveillance against human rights defenders. In the past, it has been used to target an Amnesty International staff member, HRDs, activists, and journalists from Saudi Arabia, UAE, Mexico, Morocco, and Rwanda.

Q: How does Pegasus work?

A: If infected by the Pegasus spyware, the user’s Smartphone is compromised. It can track keystrokes, take control of the phone’s camera and microphone, and access contact lists and encrypted messages.

Until now, Pegasus is known to be delivered through SMS messages carrying malicious links and through exploiting a zero-day vulnerability on WhatsApp. In the latter, intrusive spyware could be delivered on to the target’s mobile device without the targeted person having to click on a malicious link. The targeted person would simply see a missed call on WhatsApp.

In addition to this, Amnesty International has also found evidence of network injection attacks that could also be attributed to NSO Group. Network injection attacks are generally called “man-in-the-middle” attacks. Through this, an attacker with access to a target’s mobile network connection can monitor and opportunistically hijack web traffic and silently re-route the web browser to malicious exploit pages.

Q: How did the targeting via WhatsApp work?

A: NSO Group exploited a security vulnerability in WhatsApp until May 2019. In order to exploit this, the digital attack initiated WhatsApp calls to the target’s device. Attackers may have tried to exploit this issue by making calls multiple times during the night when the target was likely to be asleep and not notice these calls. Successful infection of the target’s device may result in the app crashing. There is a possibility that the attacker may also remotely erase evidence of these calls from the device’s call logs. Evidence of failed attacks may appear as missed calls from unknown numbers in your WhatsApp call log.

Q: If I didn’t receive a notification from WhatsApp, does this mean I wasn’t targeted by NSO Group’s tools?

A: NSO Group’s Pegasus tool is used for targeted attacks and by design, is not meant for mass surveillance. This means that only select individuals would have been targeted. However, if you are a high risk user, i.e., an activist, journalist, or HRD involved in politically sensitive activism, you cannot presume that you have not been targeted simply because you haven’t received a notification from WhatsApp.

The attack was delivered by exploiting a vulnerability in WhatsApp. However, NSO Pegasus infections can also be delivered through other means. Based on information revealed by our own investigations, an Amnesty International staffer was targeted using SMS messages. One HRD in Morocco was targeted both before and after the attacks using the WhatsApp exploit, but not with the WhatsApp exploit itself. Both of them were targeted using SMS messages containing malicious links and network injection attacks that could also be attributed to NSO Group’s tools. This indicates that NSO Group has the documented capability to deliver infections through means other than WhatsApp.

Q: If WhatsApp was targeted, can’t I just switch to another encrypted platform?

A: No. A vulnerability in the WhatsApp software was exploited to deliver the spyware. All complex software can have these types of vulnerabilities. This vulnerability was not a flaw in WhatsApp’s end-to-end encryption protocol.

This also does not mean that only the Whatsapp data of the target was compromised. If the attack attempt was successful, the spyware would gain full access to the device. Any other data on the device including encrypted platforms such as Signal or Telegram could then also have been accessed.

Q: Can Pegasus plant data into my devices?

A: Based on publicly available information, planting data is not a feature of NSO Group’s Pegasus spyware.

Q: What steps can I take to protect myself?

A: None of the security best practices offer complete and foolproof protection. However, it is a good practice to install the latest software updates of operating systems and encrypted messaging applications on your mobile device.

Pegasus remains a relatively uncommon threat and standard digital hygiene steps are still important. Keep your devices software up-to-date. Use a unique password for each service that you use and store these passwords in a secure password manager. Enable two-factor authentication on all accounts where it is available.

Comments

The golden crop: How turmeric is transforming women's lives in tribal India

By Vikas Meshram* When the lush green fields of turmeric sway in the tribal belt of southern Rajasthan, Madhya Pradesh, and Gujarat, it is not merely a spice crop — it is the golden glow of self-reliance. In villages where even basic spices once had to be bought from the market, the very soil today is yielding a prosperity that has transformed the lives of thousands of families. At the heart of this transformation is the initiative of Vaagdhara, which has linked turmeric with livelihoods, nutrition, and village self-governance — gram swaraj.

Swami Vivekananda's views on caste and sexuality were 'painfully' regressive

By Bhaskar Sur* Swami Vivekananda now belongs more to the modern Hindu mythology than reality. It makes a daunting job to discover the real human being who knew unemployment, humiliation of losing a teaching job for 'incompetence', longed in vain for the bliss of a happy conjugal life only to suffer the consequent frustration.

Was Netaji forced to alter face, die in obscurity in USSR in 1975? Was he so meek?

By Rajiv Shah This should sound almost hilarious. Not only did Subhas Chandra Bose not die in a plane crash in Taipei, nor was he the mysterious Gumnami Baba who reportedly passed away on 16 September 1985 in Ayodhya, but we are now told that he actually died in 1975—date unknown—“in oblivion” somewhere in the former Soviet Union. Which city? Moscow? No one seems to know.

Love letters in a lifelong war: Babusha Kohli’s resistance in verse

By Ravi Ranjan* “War does not determine who is right—only who is left.” Bertrand Russell’s words echo hauntingly in our times, and few contemporary Hindi poets embody this truth as profoundly as Babusha Kohli. Emerging from Jabalpur, Madhya Pradesh, Kohli has carved a unique space in literature by weaving together tenderness, protest, and philosophy across poetry, prose, and cinema. Her work is not merely artistic expression—it is resistance, refuge, and a call for peace.

Authoritarian destruction of the public sphere in Ecuador: Trumpism in action?

By Pilar Troya Fernández The situation in Ecuador under Daniel Noboa's government is one of authoritarianism advancing on several fronts simultaneously to consolidate neoliberalism and total submission to the US international agenda. These are not isolated measures, but rather a coordinated strategy that combines job insecurity, the dismantling of the welfare state, unrestricted access to mining, the continuation of oil exploitation without environmental considerations, the centralization of power through the financial suffocation of local governments, and the systematic criminalization of all forms of opposition and popular organization.

Echoes of Vietnam and Chile: The devastating cost of the I-A Axis in Iran

By Ram Puniyani The recent joint military actions by Israel and the United States against Iran have been devastating. Like all wars, this conflict is brutal to its core, leaving a trail of human suffering in its wake. The stated pretext for this aggression—the brutality of the Ayatollah Khamenei regime and its nuclear ambitions—clashes sharply with the reality of the diplomatic landscape. Iran had expressed a willingness to remain at the negotiating table, signaling a readiness to concede points emerging from dialogue.

Buddhist shrines were 'massively destroyed' by Brahmanical rulers: Historian DN Jha

Nalanda mahavihara By Rajiv Shah Prominent historian DN Jha, an expert in India's ancient and medieval past, in his new book , "Against the Grain: Notes on Identity, Intolerance and History", in a sharp critique of "Hindutva ideologues", who look at the ancient period of Indian history as "a golden age marked by social harmony, devoid of any religious violence", has said, "Demolition and desecration of rival religious establishments, and the appropriation of their idols, was not uncommon in India before the advent of Islam".

False claim? What Venezuela is witnessing is not surrender but a tactical retreat

By Manolo De Los Santos The early morning hours of January 3, 2026, marked an inflection point in Venezuela and Latin America’s centuries-long struggle for self-determination and independence. Operation Absolute Resolve, ordered by the Trump administration, constituted the most brutal and direct military assault on a sovereign state in the region in recent memory. In a shocking operation that left hundreds dead, President Nicolás Maduro and First Lady Cilia Flores were illegally kidnapped from Venezuelan soil and transported to the United States, where they now face fabricated charges in a New York federal detention facility. In the two months since this act of war, a torrent of speculation has emerged from so-called experts and pundits across the political spectrum. This has followed three main lines: One . The operation’s success indicated treason at the highest levels of the Bolivarian Revolution. Two . Acting President Delcy Rodríguez and the remaining leadership have abandone...

The price of silence: Why Modi won’t follow Shastri, appeal for sacrifice

By Arundhati Dhuru, Sandeep Pandey* In 1965, as India grappled with war and a crippling food crisis, Prime Minister Lal Bahadur Shastri faced a United States that used wheat shipments under the PL-480 agreement as a lever to dictate Indian foreign policy. Shastri’s response remains legendary: he appealed to the nation to skip one meal a day. Millions of middle-class households complied, choosing temporary hunger over the sacrifice of national dignity. Today, India faces a modern equivalent in the energy sector, yet the leadership’s response stands in stark contrast to that era of self-reliance.

Search This Blog