A former member of the European Parliament who investigated the misuse of surveillance technology across Europe was himself targeted with Pegasus spyware, according to a new report by cybersecurity researchers at Citizen Lab. The victim, Greek journalist-turned-lawmaker Stelios Kouloglou, was reportedly hacked at least three times between October 2022 and March 2023 while serving on the European Parliament’s PEGA Committee, which examined illegal spyware use within the European Union.

Citizen Lab said the attacks were carried out using Pegasus, spyware developed by Israel-based NSO Group. Researchers believe the infections exploited a previously unknown Apple software vulnerability that has since been patched. While the report did not identify who deployed the spyware, it linked some of the activity to earlier campaigns targeting Russian- and Belarusian-speaking journalists and activists living in Europe. Apple said it regularly alerts users believed to be targeted by state-sponsored attacks.

The revelations have renewed concerns about the use of commercial spyware against politicians, journalists, and civil society. The European Parliament said it continues to strengthen its cybersecurity measures and has made spyware screening tools available to lawmakers. Meanwhile, digital rights advocates argue the case highlights the urgent need for stronger oversight and accountability to prevent the abuse of surveillance technology.