NSO has carried out 'unlawful' surveillance to target Amnesty staff members, HRDs

Counterview Desk
Following the exposure that Israeli spyware Pegasus, manufactured by NSO Group, has been used as a surveillance tool on smartphones used by about 1,500 human rights defenders (HRDs), journalists and activists, including in India, the top rights body, Amnesty International India, has appealed to those who have received a notification immediately to get in touch with Amnesty Tech at share@amnesty.tech for support.

An Amnesty release on November 2 said that the rights body could also be contacted “on Signal or WhatsApp at +44 7492 882216”, adding, “We would be keen to provide support to HRDs, who have been targeted, to ensure they take defensive security measures immediately, as well as to understand more about the attacks and investigate possible infections.”

Meanwhile, Amnesty has put out questions and answers for HRDs, activist, or journalist based in India to understand NSO Group’s spyware Pegasus especially the WhatsApp targeting.

Text:

Q: What do we know about the NSO Group and its ‘Pegasus’ Spyware?

A: ‘NSO Group’ is an Israeli spyware manufacturer that claims to sell its surveillance tools – the most well-known being its Pegasus spyware – exclusively to governments and government agencies ‘to combat terror and crime’.

Its products have been misused multiple times to conduct unlawful surveillance against human rights defenders. In the past, it has been used to target an Amnesty International staff member, HRDs, activists, and journalists from Saudi Arabia, UAE, Mexico, Morocco, and Rwanda.

Q: How does Pegasus work?

A: If infected by the Pegasus spyware, the user’s Smartphone is compromised. It can track keystrokes, take control of the phone’s camera and microphone, and access contact lists and encrypted messages.

Until now, Pegasus is known to be delivered through SMS messages carrying malicious links and through exploiting a zero-day vulnerability on WhatsApp. In the latter, intrusive spyware could be delivered on to the target’s mobile device without the targeted person having to click on a malicious link. The targeted person would simply see a missed call on WhatsApp.

In addition to this, Amnesty International has also found evidence of network injection attacks that could also be attributed to NSO Group. Network injection attacks are generally called “man-in-the-middle” attacks. Through this, an attacker with access to a target’s mobile network connection can monitor and opportunistically hijack web traffic and silently re-route the web browser to malicious exploit pages.

Q: How did the targeting via WhatsApp work?

A: NSO Group exploited a security vulnerability in WhatsApp until May 2019. In order to exploit this, the digital attack initiated WhatsApp calls to the target’s device. Attackers may have tried to exploit this issue by making calls multiple times during the night when the target was likely to be asleep and not notice these calls. Successful infection of the target’s device may result in the app crashing. There is a possibility that the attacker may also remotely erase evidence of these calls from the device’s call logs. Evidence of failed attacks may appear as missed calls from unknown numbers in your WhatsApp call log.

Q: If I didn’t receive a notification from WhatsApp, does this mean I wasn’t targeted by NSO Group’s tools?

A: NSO Group’s Pegasus tool is used for targeted attacks and by design, is not meant for mass surveillance. This means that only select individuals would have been targeted. However, if you are a high risk user, i.e., an activist, journalist, or HRD involved in politically sensitive activism, you cannot presume that you have not been targeted simply because you haven’t received a notification from WhatsApp.

The attack was delivered by exploiting a vulnerability in WhatsApp. However, NSO Pegasus infections can also be delivered through other means. Based on information revealed by our own investigations, an Amnesty International staffer was targeted using SMS messages. One HRD in Morocco was targeted both before and after the attacks using the WhatsApp exploit, but not with the WhatsApp exploit itself. Both of them were targeted using SMS messages containing malicious links and network injection attacks that could also be attributed to NSO Group’s tools. This indicates that NSO Group has the documented capability to deliver infections through means other than WhatsApp.

Q: If WhatsApp was targeted, can’t I just switch to another encrypted platform?

A: No. A vulnerability in the WhatsApp software was exploited to deliver the spyware. All complex software can have these types of vulnerabilities. This vulnerability was not a flaw in WhatsApp’s end-to-end encryption protocol.

This also does not mean that only the Whatsapp data of the target was compromised. If the attack attempt was successful, the spyware would gain full access to the device. Any other data on the device including encrypted platforms such as Signal or Telegram could then also have been accessed.

Q: Can Pegasus plant data into my devices?

A: Based on publicly available information, planting data is not a feature of NSO Group’s Pegasus spyware.

Q: What steps can I take to protect myself?

A: None of the security best practices offer complete and foolproof protection. However, it is a good practice to install the latest software updates of operating systems and encrypted messaging applications on your mobile device.

Pegasus remains a relatively uncommon threat and standard digital hygiene steps are still important. Keep your devices software up-to-date. Use a unique password for each service that you use and store these passwords in a secure password manager. Enable two-factor authentication on all accounts where it is available.

Comments

Plastic burning in homes threatens food, water and air across Global South: Study

By Jag Jivan In a groundbreaking study spanning 26 countries across the Global South , researchers have uncovered the widespread and concerning practice of households burning plastic waste as a fuel for cooking, heating, and other domestic needs. The research, published in Nature Communications , reveals that this hazardous method of managing both waste and energy poverty is driven by systemic failures in municipal services and the unaffordability of clean alternatives, posing severe risks to human health and the environment.

From protest to proof: Why civil society must rethink environmental resistance

By Shankar Sharma* As concerned environmentalists and informed citizens, many of us share deep unease about the way environmental governance in our country is being managed—or mismanaged. Our complaints range across sectors and regions, and most of them are legitimate. Yet a hard question confronts us: are complaints, by themselves, effective? Experience suggests they are not.

Economic superpower’s social failure? Inequality, malnutrition and crisis of India's democracy

By Vikas Meshram India may be celebrated as one of the world’s fastest-growing economies, but a closer look at who benefits from that growth tells a starkly different story. The recently released World Inequality Report 2026 lays bare a country sharply divided by wealth, privilege and power. According to the report, nearly 65 percent of India’s total wealth is owned by the richest 10 percent of its population, while the bottom half of the country controls barely 6.4 percent. The top one percent—around 14 million people—holds more than 40 percent, the highest concentration since 1961. Meanwhile, the female labour force participation rate is a dismal 15.7 percent.

Kolkata event marks 100 years since first Communist conference in India

By Harsh Thakor* A public assembly was held in Kolkata on December 24, 2025, to mark the centenary of the First Communist Conference in India , originally convened in Kanpur from December 26 to 28, 1925. The programme was organised by CPI (ML) New Democracy at Subodh Mallik Square on Lenin Sarani. According to the organisers, around 2,000 people attended the assembly.

From colonial mercantilism to Hindutva: New book on the making of power in Gujarat

By Rajiv Shah Professor Ghanshyam Shah ’s latest book, “ Caste-Class Hegemony and State Power: A Study of Gujarat Politics ”, published by Routledge , is penned by one of Gujarat ’s most respected chroniclers, drawing on decades of fieldwork in the state. It seeks to dissect how caste and class factors overlap to perpetuate the hegemony of upper strata in an ostensibly democratic polity. The book probes the dominance of two main political parties in Gujarat—the Indian National Congress and the BJP—arguing that both have sustained capitalist growth while reinforcing Brahmanic hierarchies.

Urgent need to study cause of large number of natural deaths in Gulf countries

By Venkatesh Nayak* According to data tabled in Parliament in April 2018, there are 87.76 lakh (8.77 million) Indians in six Gulf countries, namely Bahrain, Kuwait, Oman, Qatar, Saudi Arabia and the United Arab Emirates (UAE). While replying to an Unstarred Question (#6091) raised in the Lok Sabha, the Union Minister of State for External Affairs said, during the first half of this financial year alone (between April-September 2018), blue-collared Indian workers in these countries had remitted USD 33.47 Billion back home. Not much is known about the human cost of such earnings which swell up the country’s forex reserves quietly. My recent RTI intervention and research of proceedings in Parliament has revealed that between 2012 and mid-2018 more than 24,570 Indian Workers died in these Gulf countries. This works out to an average of more than 10 deaths per day. For every US$ 1 Billion they remitted to India during the same period there were at least 117 deaths of Indian Workers in Gulf ...

The greatest threat to our food system: The aggressive push for GM crops

By Bharat Dogra Thanks to the courageous resistance of several leading scientists who continue to speak the truth despite increasing pressures from the powerful GM crop and GM food lobby , the many-sided and in some contexts irreversible environmental and health impacts of GM foods and crops, as well as the highly disruptive effects of this technology on farmers, are widely known today.

History, culture and literature of Fatehpur, UP, from where Maulana Hasrat Mohani hailed

By Vidya Bhushan Rawat* Maulana Hasrat Mohani was a member of the Constituent Assembly and an extremely important leader of our freedom movement. Born in Unnao district of Uttar Pradesh, Hasrat Mohani's relationship with nearby district of Fatehpur is interesting and not explored much by biographers and historians. Dr Mohammad Ismail Azad Fatehpuri has written a book on Maulana Hasrat Mohani and Fatehpur. The book is in Urdu. He has just come out with another important book, 'Hindi kee Pratham Rachna: Chandayan' authored by Mulla Daud Dalmai.' During my recent visit to Fatehpur town, I had an opportunity to meet Dr Mohammad Ismail Azad Fatehpuri and recorded a conversation with him on issues of history, culture and literature of Fatehpur. Sharing this conversation here with you. Kindly click this link. --- *Human rights defender. Facebook https://www.facebook.com/vbrawat , X @freetohumanity, Skype @vbrawat

Transgender Bill testimony of Govt of India's ‘contempt’ for marginalized community

Counterview Desk India’s civil society network, National Alliance of People’s Movements (NAPM)* has said that the controversial transgender Bill, passed in the Rajya Sabha on November 26, which happened to be the 70th anniversary of the Indian Constitution, is a reflection on the way the Government of India looks at the marginalized community with utter contempt.

Search This Blog