Skip to main content

NSO has carried out 'unlawful' surveillance to target Amnesty staff members, HRDs


Counterview Desk
Following the exposure that Israeli spyware Pegasus, manufactured by NSO Group, has been used as a surveillance tool on smartphones used by about 1,500 human rights defenders (HRDs), journalists and activists, including in India, the top rights body, Amnesty International India, has appealed to those who have received a notification immediately to get in touch with Amnesty Tech at share@amnesty.tech for support.
An Amnesty release on November 2 said that the rights body could also be contacted “on Signal or WhatsApp at +44 7492 882216”, adding, “We would be keen to provide support to HRDs, who have been targeted, to ensure they take defensive security measures immediately, as well as to understand more about the attacks and investigate possible infections.”
Meanwhile, Amnesty has put out questions and answers for HRDs, activist, or journalist based in India to understand NSO Group’s spyware Pegasus especially the WhatsApp targeting.

Text:

Q: What do we know about the NSO Group and its ‘Pegasus’ Spyware?
A: ‘NSO Group’ is an Israeli spyware manufacturer that claims to sell its surveillance tools – the most well-known being its Pegasus spyware – exclusively to governments and government agencies ‘to combat terror and crime’.
Its products have been misused multiple times to conduct unlawful surveillance against human rights defenders. In the past, it has been used to target an Amnesty International staff member, HRDs, activists, and journalists from Saudi Arabia, UAE, Mexico, Morocco, and Rwanda.
Q: How does Pegasus work?
A: If infected by the Pegasus spyware, the user’s Smartphone is compromised. It can track keystrokes, take control of the phone’s camera and microphone, and access contact lists and encrypted messages.
Until now, Pegasus is known to be delivered through SMS messages carrying malicious links and through exploiting a zero-day vulnerability on WhatsApp. In the latter, intrusive spyware could be delivered on to the target’s mobile device without the targeted person having to click on a malicious link. The targeted person would simply see a missed call on WhatsApp.
In addition to this, Amnesty International has also found evidence of network injection attacks that could also be attributed to NSO Group. Network injection attacks are generally called “man-in-the-middle” attacks. Through this, an attacker with access to a target’s mobile network connection can monitor and opportunistically hijack web traffic and silently re-route the web browser to malicious exploit pages.
Q: How did the targeting via WhatsApp work?
A: NSO Group exploited a security vulnerability in WhatsApp until May 2019. In order to exploit this, the digital attack initiated WhatsApp calls to the target’s device. Attackers may have tried to exploit this issue by making calls multiple times during the night when the target was likely to be asleep and not notice these calls. Successful infection of the target’s device may result in the app crashing. There is a possibility that the attacker may also remotely erase evidence of these calls from the device’s call logs. Evidence of failed attacks may appear as missed calls from unknown numbers in your WhatsApp call log.
Q: If I didn’t receive a notification from WhatsApp, does this mean I wasn’t targeted by NSO Group’s tools?
A: NSO Group’s Pegasus tool is used for targeted attacks and by design, is not meant for mass surveillance. This means that only select individuals would have been targeted. However, if you are a high risk user, i.e., an activist, journalist, or HRD involved in politically sensitive activism, you cannot presume that you have not been targeted simply because you haven’t received a notification from WhatsApp.
The attack was delivered by exploiting a vulnerability in WhatsApp. However, NSO Pegasus infections can also be delivered through other means. Based on information revealed by our own investigations, an Amnesty International staffer was targeted using SMS messages. One HRD in Morocco was targeted both before and after the attacks using the WhatsApp exploit, but not with the WhatsApp exploit itself. Both of them were targeted using SMS messages containing malicious links and network injection attacks that could also be attributed to NSO Group’s tools. This indicates that NSO Group has the documented capability to deliver infections through means other than WhatsApp.
Q: If WhatsApp was targeted, can’t I just switch to another encrypted platform?
A: No. A vulnerability in the WhatsApp software was exploited to deliver the spyware. All complex software can have these types of vulnerabilities. This vulnerability was not a flaw in WhatsApp’s end-to-end encryption protocol.
This also does not mean that only the Whatsapp data of the target was compromised. If the attack attempt was successful, the spyware would gain full access to the device. Any other data on the device including encrypted platforms such as Signal or Telegram could then also have been accessed.
Q: Can Pegasus plant data into my devices?
A: Based on publicly available information, planting data is not a feature of NSO Group’s Pegasus spyware.
Q: What steps can I take to protect myself?
A: None of the security best practices offer complete and foolproof protection. However, it is a good practice to install the latest software updates of operating systems and encrypted messaging applications on your mobile device.
Pegasus remains a relatively uncommon threat and standard digital hygiene steps are still important. Keep your devices software up-to-date. Use a unique password for each service that you use and store these passwords in a secure password manager. Enable two-factor authentication on all accounts where it is available.

Comments

Post a Comment

TRENDING

Gujarat Information Commission issues warning against misinterpretation of RTI orders

By A Representative   The Gujarat Information Commission (GIC) has issued a press note clarifying that its orders limiting the number of Right to Information (RTI) applications for certain individuals apply only to those specific applicants. The GIC has warned that it will take disciplinary action against any public officials who misinterpret these orders to deny information to other citizens. The press note, signed by GIC Secretary Jaideep Dwivedi, states that the Right to Information Act, 2005, is a powerful tool for promoting transparency and accountability in public administration. However, the commission has observed that some applicants are misusing the act by filing an excessive number of applications, which disproportionately consumes the time and resources of Public Information Officers (PIOs), First Appellate Authorities (FAAs), and the commission itself. This misuse can cause delays for genuine applicants seeking justice. In response to this issue, and in acc...
2 comments
»

A comrade in culture and controversy: Yao Wenyuan’s revolutionary legacy

By Harsh Thakor*  This year marks two important anniversaries in Chinese revolutionary history—the 20th death anniversary of Yao Wenyuan, and the 50th anniversary of his seminal essay "On the Social Basis of the Lin Biao Anti-Party Clique". These milestones invite reflection on the man whose pen ignited the first sparks of the Great Proletarian Cultural Revolution and whose sharp ideological interventions left an indelible imprint on the political and cultural landscape of socialist China.
Post a Comment
»

'MGNREGA crisis deepening': NSM demands fair wages and end to digital exclusions

By A Representative   The NREGA Sangharsh Morcha (NSM), a coalition of independent unions of MGNREGA workers, has warned that the Mahatma Gandhi National Rural Employment Guarantee Act (MGNREGA) is facing a “severe crisis” due to persistent neglect and restrictive measures imposed by the Union Government.
Post a Comment
»

Gandhiji quoted as saying his anti-untouchability view has little space for inter-dining with "lower" castes

By A Representative A senior activist close to Narmada Bachao Andolan (NBA) leader Medha Patkar has defended top Booker prize winning novelist Arundhati Roy’s controversial utterance on Gandhiji that “his doctrine of nonviolence was based on an acceptance of the most brutal social hierarchy the world has ever known, the caste system.” Surprised at the police seeking video footage and transcript of Roy’s Mahatma Ayyankali memorial lecture at the Kerala University on July 17, Nandini K Oza in a recent blog quotes from available sources to “prove” that Gandhiji indeed believed in “removal of untouchability within the caste system.”
Post a Comment
»

Targeted eviction of Bengali-speaking Muslims across Assam districts alleged

By A Representative   A delegation led by prominent academic and civil rights leader Sandeep Pandey  visited three districts in Assam—Goalpara, Dhubri, and Lakhimpur—between 2 and 4 September 2025 to meet families affected by recent demolitions and evictions. The delegation reported widespread displacement of Bengali-speaking Muslim communities, many of whom possess valid citizenship documents including Aadhaar, voter ID, ration cards, PAN cards, and NRC certification. 
Post a Comment
»

'Centre criminally negligent': SKM demands national disaster declaration in flood-hit states

By A Representative   The Samyukt Kisan Morcha (SKM) has urged the Centre to immediately declare the recent floods and landslides in Punjab, Himachal Pradesh, Jammu & Kashmir, Uttarakhand, and Haryana as a national disaster, warning that the delay in doing so has deepened the suffering of the affected population.
Post a Comment
»

Saffron Kingdom – a cinematic counter-narrative to The Kashmir Files

By Syed Ali Mujtaba*  “Saffron Kingdom” is a film produced in the United States by members of the Kashmiri diaspora, positioned as a response to the 2022 release “The Kashmir Files.” While the latter focused on the exodus of Kashmiri Pandits and framed Kashmiri Muslims as perpetrators of violence, “Saffron Kingdom” seeks to present an alternate perspective—highlighting the experiences of Kashmiri Muslims facing alleged abuses by Indian security forces.
Post a Comment
»

From lazy to lost? The myths and realities behind generational panic about youth

By Bhabani Shankar Nayak   Older generations in many societies often describe the young with labels such as “lazy, unproductive, lost, anxious, depoliticised, unpatriotic or wayward.” Others see them as “social media, mobile phone and porn addicts.” Such judgments arise from a generational anxiety rooted in fears of losing control and from distorted perceptions about youth, especially in the context of economic crises, conflicts, and wars in which many young lives are lost.
Post a Comment
»

'Govts must walk the talk on gender equality, right to health, human rights to deliver SDGs by 2030'

By A Representative  With just 64 months left to deliver on the Sustainable Development Goals (SDGs), global health and rights advocates have called upon governments to honour their commitments on gender equality and the human right to health. Speaking ahead of the 80th United Nations General Assembly (UNGA), experts warned that rising anti-rights and anti-gender pushes are threatening hard-won progress on SDG-3 (health and wellbeing) and SDG-5 (gender equality).
Post a Comment
»