Police use of Pegasus malware not illegal, Israeli inquiry finds

Police have been accused of spying on at least 26 individuals who are not criminal suspects

An inquiry into allegations that Israel’s police force systematically hacked into the mobile phones of Israeli citizens has found that while the police did use NSO Group’s controversial Pegasus malware, there is no evidence suggesting illegality.

In a series of explosive reports over the last two months, the local financial daily newspaper Calcalist accused the police of spying on at least 26 individuals who were not criminal suspects. Those named included politicians, protesters, and members of the former prime minister Benjamin Netanyahu’s inner circle – claims Netanyahu used to delay proceedings in his corruption trial.

Israel’s attorney general’s office ordered an investigation into the alleged police behaviour last month. On Monday, the Israeli justice ministry contradicted the most serious of the newspaper’s claims, saying an interim inquiry discovered “no indication” that the police had bypassed judicial authorisation in using the spyware.

In two instances, unsuccessful attempts were made to hack the phones of people subject to court orders authorising the tracking of their electronic communications, and in a third case the police succeeded, the probe found. It also said investigators looked into the use of a second type of spyware available to police and again found no signs of wrongdoing.

The announcement still represents the first time the Israeli government has confirmed that Pegasus has been deployed against a citizen.

A consortium of 17 media outlets, including the Guardian, revealed last year that the Israeli-made surveillance product had been sold to repressive governments worldwide and used to surveil activists, journalists and lawyers, as well as government officials and heads of state.

NSO has previously said that all its sales are government-authorised and that it does not itself run Pegasus. Israel has since tightened rules on the export of cyberweapons, and NSO was blacklisted by the US in November.

While the Israeli state and private firms have developed sophisticated surveillance systems to monitor the activities of people in the occupied Palestinian territories, where Israel implements military law, senior NSO officials had previously said that its software was not authorised for use against Israeli and US telephone numbers.

Those reassurances subsequently caused public outrage when the Calcalist allegations were published earlier this year. The claims were strongly denied by the police service.

An editorial carried by Calcalist on Tuesday acknowledged that the deputy attorney general Amit Merari’s initial findings necessitated “a review of the paper’s allegations”.

NSO, which has been fighting a mounting tide of criticism, welcomed the justice ministry’s announcement, saying in a statement that the company hoped the conclusions “will result in reporting that no longer relies upon misinformation and political organisations issuing biased and prejudiced reports”.

Questions remain over whether current Israeli privacy law, which came into force in 1981, is fit to handle the technical intricacies of modern spyware. Cybersecurity experts have previously suggested that Israeli court orders are not sufficient for authorising the use of invasive malware such as Pegasus.

Merari’s investigation utilising the technological expertise of the Shin Bet and the Mossad, Israel’s domestic and foreign intelligence agencies, continues.

Her team will examine whether spying software was used without court orders on individuals other than those mentioned in the Calcalist reports, and whether the police exceeded their authority in using spyware on citizens, the justice ministry said.


Bethan McKernan in Jerusalem

The GuardianTramp

Related Content

Article image
Pegasus spyware inquiry targeted by disinformation campaign, say experts
European parliament is investigating powerful surveillance tool used by governments around the world

Stephanie Kirchgaessner in Washington and Sam Jones in Madrid

28, Nov, 2022 @12:14 PM

Article image
Israel inquiry to look into alleged police use of Pegasus spyware
Newspaper claims businesspeople, politicians, activists and Netanyahu’s son were targeted by phone intercepts

Peter Beaumont

07, Feb, 2022 @1:47 PM

Article image
‘Amoral 21st-century mercenaries’: problems mount for NSO Group
Israeli spyware firm’s problems go from bad to worse as scathing Apple lawsuit follows US blacklisting

Stephanie Kirchgaessner in Washington DC

26, Nov, 2021 @3:37 PM

Article image
Hacking of activists is latest in long line of cyber-attacks on Palestinians
Analysis: while identity of hackers is not known in this case, Palestinians have long been spied on by Israeli military

Peter Beaumont

08, Nov, 2021 @4:22 PM

Article image
Israeli minister defends police over alleged Pegasus spying
Omer Barlev denied claims that protesters’ phones had been hacked

Bethan McKernan and Quique Kierszenbaum in Jerusalem

19, Jan, 2022 @8:04 PM

Article image
CEO of Israeli Pegasus spyware firm NSO to step down
CEO Shalev Hulio is stepping down as part of NSO reorganisation that will see it focus on sales in Nato member countries

Staff and agencies

21, Aug, 2022 @11:50 PM

Article image
NSO Pegasus spyware can no longer target UK phone numbers
Israeli maker of surveillance software blocked +44 code after discovering hack against Princess Haya, source says

Dan Sabbagh Defence and security editor

08, Oct, 2021 @5:53 PM

Article image
Inquiry finds Israeli police used spyware against three people, report says
Initial investigation is said to have found NSO Group’s Pegasus tool was used against three of 26 alleged targets

Peter Beaumont

09, Feb, 2022 @12:09 PM

Article image
Israeli citizens targeted by police using Pegasus spyware, report claims
Investigation alleges Israeli police carried out phone intercepts without court supervision or monitoring of how data was used

Peter Beaumont

18, Jan, 2022 @2:54 PM

Article image
Israeli firm’s spyware linked to attacks on websites in UK and Middle East
Canada-based researchers say new evidence suggests Candiru’s software used to target critics of autocratic regimes

Stephanie Kirchgaessner in Washington

16, Nov, 2021 @4:15 PM