Security News > 2022 > February > EU Data Protection Watchdog Calls for Ban on Pegasus-like Commercial Spyware

The European Union's data protection authority on Tuesday called for a ban on the development and the use of Pegasus-like commercial spyware in the region, calling out the technology's "Unprecedented level of intrusiveness" that could endanger users' right to privacy.

"Pegasus constitutes a paradigm shift in terms of access to private communications and devices, which is able to affect the very essence of our fundamental rights, in particular the right to privacy," the European Data Protection Supervisor said in its preliminary remarks.

Pegasus is a piece of highly advanced military-grade intrusion software developed by Israeli company NSO Group that's capable of breaking into smartphones running Android and iOS, turning the devices into a remote monitoring tool capable of extracting sensitive information, recording conversations, and tracking users' movements.

Besides granting unrestricted access to the targeted devices, Pegasus is stealthily installed on devices by leveraging zero-click exploits, such as KISMET and FORCEDENTRY, that require no interaction from the users.

While NSO Group has repeatedly claimed that the software is sold only to governments for the purpose of fighting crime and terrorism, and that's it's on a "Life-saving mission," a growing list of evidence has uncovered widespread abuse of Pegasus to hack into the phones of journalists, political figures, dissidents, and activists in several countries, including Israel.

The watchdog has proposed better supervision over the use of surveillance measures, a stricter implementation of data protection regulations, and strengthening legislation outlawing the use of sophisticated hacking tools such as Pegasus to safeguard against unlawful use.

News URL

https://thehackernews.com/2022/02/eu-data-protection-watchdog-calls-for.html