20 July 2021
20 July 2021
The Media Freedom Rapid Response (MFRR) is highly alarmed by the revelations by a consortium led by French NGO Forbidden Stories about the surveillance of journalists, human rights defenders, lawyers and others through the Pegasus spyware program developed by Israeli company NSO Group. The leak, which revealed the involvement of the Hungarian government among others, raises significant implications for journalists’ security and the protection of their sources as well as raising concerns through the chilling effect such applications have on journalists beyond those immediately affected and ultimately, on everyone’s right to information.
We call on the Hungarian government and other implicated governments to immediately stop using the spyware and to provide transparency about its application so far. We also call on the NSO Group to take its corporate social responsibility more seriously and stop selling Pegasus to regimes with poor human rights and media freedom records, provide more transparency that will enable proper oversight and establish more stringent due diligence processes.
Forbidden Stories obtained leaked records of phone data, suggesting that various governments worldwide selected media workers, lawyers and activists as possible targets for invasive surveillance with the Pegasus spyware. The spyware has the potential to transform the targets’ phones into surveillance devices, allowing access to all data on the phone and enabling control over audio and video to make recordings surreptitiously. Inclusion of a phone number on the leaked list does not necessarily entail that the linked device was successfully hacked, but forensic analysis on dozens of phones so far effectively shows evidence of Pegasus activity in more than half of the cases. NSO Group has repeatedly said that its spyware, which they sold to some of the world’s most repressive regimes, is meant for use only against terrorists and serious criminals. Unsurprisingly, despite claims by NSO Group that they will cut off clients if they misuse the spyware, it appears that Pegasus has been used well beyond this stated intended target group by those clients, to potentially include anyone perceived as an opponent or threat to the regime.
In the European Union, forensic analysis of several devices has shown that the Hungarian government has deployed the spyware program against investigative journalists and the circle of one of the country’s last remaining independent media owners. At least five journalists figure in the leaked records and at least ten lawyers and an opposition politician. They include Szabolcs Panyi, a well-known reporter at investigative outlet Direkt36, who has been publicly attacked in the past by Prime Minister Viktor Orbán’s spokesperson Zoltán Kovács, who has accused him of “Orbánophobia”. Also analysis of his colleague András Szabó’s phone showed positive results for the use of Pegasus. Other Hungarian media workers selected for potential targeting include Dávid Dercényi, who edits a newspaper put out by the authority of an opposition-run district in Budapest; a photographer who worked as a fixer for visiting foreign journalists; and, a well-known investigative journalist. Furthermore, it appears also the circle of investor Zoltán Varga, who owns several independent media outlets and has been pressured in the past, was surveilled using the Pegasus software.
In a response quoted in The Guardian, the Hungarian government said that “state bodies authorised to use covert instruments are regularly monitored by governmental and non-governmental institutions.” The country has a very permissive legal framework for surveillance. In 2020, the justice minister approved 1,285 surveillance requests (not necessarily using Pegasus spyware).
The most recent revelations about Pegasus serve to highlight two things. On the one hand, they underscore the urgent need for meaningful reforms that will ensure powerful commercial technology is not abused by governments at the expense of civil liberties. They also show the essential role watchdog journalism plays in safeguarding the human rights that underpin democracy, by exposing violations and holding the perpetrators to account.
European Centre for Press and Media Freedom (ECPMF)
European Federation of Journalists (EFJ)
Free Press Unlimited (FPU)
International Press Institute (IPI)
Osservatorio Balcani e Caucaso Transeuropa (OBCT)
This statement is part of the Media Freedom Rapid Response (MFRR), an Europe-wide mechanism, which tracks, monitors and responds to violations of press and media freedom in EU Member States and Candidate Countries. This project provides legal and practical support, public advocacy and information to protect journalists and media workers. The MFRR is organised by an consortium led by the European Centre for Press and Media Freedom (ECPMF) with ARTICLE 19, the European Federation of Journalists (EFJ), Free Press Unlimited (FPU), the Institute for Applied Informatics at the University of Leipzig (InfAI), International Press Institute (IPI) and CCI/Osservatorio Balcani e Caucaso Transeuropa (OBCT). The project is co-funded by the European Commission. www.mfrr.eu
The partners in the Media Freedom Rapid Response and the Safe Journalists Network are deeply saddened to learn about the shocking attack on Top Channel Albania, in which a security guard was killed.READ MORE
The MFRR is concerned by recent developments in Republika Srpska, Bosnia and Herzegovina, where the government has introduced amendments to the Criminal Code that would re-criminalise defamation.READ MORE
The undersigned international press freedom and journalists organisations urge the government of Malta to follow up on the recent public consultation into media law reforms by implementing changes which will significantly strengthen the draft legislation.READ MORE
The MFRR partners urge the EC Member States to take action for the safety of journalists without further delay and implement the provisions of the Recommendation on ensuring the protection, safety and empowerment of journalists and other media professionals.READ MORE
Following the start of the retrial last week at the Court of Appeal for the 1999 murder of Slavko Ćuruvija, the partners of the MFRR and the SafeJournalists Network today renew our call for justice for his killing to finally be secured.READ MORE
MFRR partners condemn the decision of the Italian prosecutor to issue a seizure order for Domani’s investigative article, following a criminal complaint by the governmental representative.READ MORE
All content available on the ECPMF website is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
04155 Leipzig / Germany
Tel: +49 (0) 172 367 499 0
Fax: +49 (0) 341 562 96 63
© Copyright 2022 – ECPMF
European Centre for Press and Media Freedom
|_mcid||1 year||This is a Mailchimp functionality cookie used to evaluate the UI/UX interaction with its platform|
|_ga||2 years||The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.|
|_gat_gtag_UA_84831681_1||1 minute||Set by Google to distinguish users.|
|_gid||1 day||Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.|
|ahoy_visit||4 hours||This cookie is set by Powr for analytics measurement.|
|ahoy_visitor||2 years||This cookie is set by Powr for analytics measurement.|
|CONSENT||2 years||YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data.|
|s_vi||2 years||An Adobe Analytics cookie that uses a unique visitor ID time/date stamp to identify a unique vistor to the website.|
|VISITOR_INFO1_LIVE||5 months 27 days||A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface.|
|YSC||session||YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages.|
|yt-remote-connected-devices||never||YouTube sets this cookie to store the video preferences of the user using embedded YouTube video.|
|yt-remote-device-id||never||YouTube sets this cookie to store the video preferences of the user using embedded YouTube video.|