20 July 2021
20 July 2021
The Media Freedom Rapid Response (MFRR) is highly alarmed by the revelations by a consortium led by French NGO Forbidden Stories about the surveillance of journalists, human rights defenders, lawyers and others through the Pegasus spyware program developed by Israeli company NSO Group. The leak, which revealed the involvement of the Hungarian government among others, raises significant implications for journalists’ security and the protection of their sources as well as raising concerns through the chilling effect such applications have on journalists beyond those immediately affected and ultimately, on everyone’s right to information.
We call on the Hungarian government and other implicated governments to immediately stop using the spyware and to provide transparency about its application so far. We also call on the NSO Group to take its corporate social responsibility more seriously and stop selling Pegasus to regimes with poor human rights and media freedom records, provide more transparency that will enable proper oversight and establish more stringent due diligence processes.
Forbidden Stories obtained leaked records of phone data, suggesting that various governments worldwide selected media workers, lawyers and activists as possible targets for invasive surveillance with the Pegasus spyware. The spyware has the potential to transform the targets’ phones into surveillance devices, allowing access to all data on the phone and enabling control over audio and video to make recordings surreptitiously. Inclusion of a phone number on the leaked list does not necessarily entail that the linked device was successfully hacked, but forensic analysis on dozens of phones so far effectively shows evidence of Pegasus activity in more than half of the cases. NSO Group has repeatedly said that its spyware, which they sold to some of the world’s most repressive regimes, is meant for use only against terrorists and serious criminals. Unsurprisingly, despite claims by NSO Group that they will cut off clients if they misuse the spyware, it appears that Pegasus has been used well beyond this stated intended target group by those clients, to potentially include anyone perceived as an opponent or threat to the regime.
In the European Union, forensic analysis of several devices has shown that the Hungarian government has deployed the spyware program against investigative journalists and the circle of one of the country’s last remaining independent media owners. At least five journalists figure in the leaked records and at least ten lawyers and an opposition politician. They include Szabolcs Panyi, a well-known reporter at investigative outlet Direkt36, who has been publicly attacked in the past by Prime Minister Viktor Orbán’s spokesperson Zoltán Kovács, who has accused him of “Orbánophobia”. Also analysis of his colleague András Szabó’s phone showed positive results for the use of Pegasus. Other Hungarian media workers selected for potential targeting include Dávid Dercényi, who edits a newspaper put out by the authority of an opposition-run district in Budapest; a photographer who worked as a fixer for visiting foreign journalists; and, a well-known investigative journalist. Furthermore, it appears also the circle of investor Zoltán Varga, who owns several independent media outlets and has been pressured in the past, was surveilled using the Pegasus software.
In a response quoted in The Guardian, the Hungarian government said that “state bodies authorised to use covert instruments are regularly monitored by governmental and non-governmental institutions.” The country has a very permissive legal framework for surveillance. In 2020, the justice minister approved 1,285 surveillance requests (not necessarily using Pegasus spyware).
The most recent revelations about Pegasus serve to highlight two things. On the one hand, they underscore the urgent need for meaningful reforms that will ensure powerful commercial technology is not abused by governments at the expense of civil liberties. They also show the essential role watchdog journalism plays in safeguarding the human rights that underpin democracy, by exposing violations and holding the perpetrators to account.
European Centre for Press and Media Freedom (ECPMF)
European Federation of Journalists (EFJ)
Free Press Unlimited (FPU)
International Press Institute (IPI)
Osservatorio Balcani e Caucaso Transeuropa (OBCT)
This statement is part of the Media Freedom Rapid Response (MFRR), an Europe-wide mechanism, which tracks, monitors and responds to violations of press and media freedom in EU Member States and Candidate Countries. This project provides legal and practical support, public advocacy and information to protect journalists and media workers. The MFRR is organised by an consortium led by the European Centre for Press and Media Freedom (ECPMF) with ARTICLE 19, the European Federation of Journalists (EFJ), Free Press Unlimited (FPU), the Institute for Applied Informatics at the University of Leipzig (InfAI), International Press Institute (IPI) and CCI/Osservatorio Balcani e Caucaso Transeuropa (OBCT). The project is co-funded by the European Commission. www.mfrr.eu
Following a two-day fact-finding mission to Tirana on 17-18 November 2022, the partners of the Council of Europe’s Platform on Safety of Journalists today publish their findings on press freedom, media pluralism and the safety of journalists in Albania.READ MORE
Members of the Coalition Against SLAPPs in Europe (CASE), with the support of the coalition’s Italian group and Media Freedom Rapid Response (MFRR), express solidarity with Roberto Saviano who attended the first hearing in the proceedings for aggravated defamation initiated against him by current Prime Minister Giorgia Meloni.READ MORE
Press freedom groups raise alarm that Bulgarian Foreign Agent law appears intended to target critical media.READ MORE
The undersigned international media freedom and journalists organisations wrote to Grigoris Dimitriadis to express our shared concern about defamation claims filed against investigative journalists and media outlets following your resignation from the role of general secretary in the office of the Greek Prime Minister in August 2022.READ MORE
The undersigned media freedom and journalists organisations and unions today urge the Chamber of Deputies of the Czech Republic to vote to pass a draft bill which would amend the law on public broadcasting to strengthen the institutional independence of Česká televize (Czech Television) and Český rozhlas (Czech Radio).READ MORE
The partner organisations of the Media Freedom Rapid Response (MFRR) today back calls for the testing of mobile devices belonging to journalists in Greece who suspect they may have been targets of intrusive spyware or other advanced surveillance.READ MORE
|_mcid||1 year||This is a Mailchimp functionality cookie used to evaluate the UI/UX interaction with its platform|
|_ga||2 years||The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.|
|_gat_gtag_UA_84831681_1||1 minute||Set by Google to distinguish users.|
|_gid||1 day||Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.|
|ahoy_visit||4 hours||This cookie is set by Powr for analytics measurement.|
|ahoy_visitor||2 years||This cookie is set by Powr for analytics measurement.|
|CONSENT||2 years||YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data.|
|s_vi||2 years||An Adobe Analytics cookie that uses a unique visitor ID time/date stamp to identify a unique vistor to the website.|
|VISITOR_INFO1_LIVE||5 months 27 days||A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface.|
|YSC||session||YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages.|
|yt-remote-connected-devices||never||YouTube sets this cookie to store the video preferences of the user using embedded YouTube video.|
|yt-remote-device-id||never||YouTube sets this cookie to store the video preferences of the user using embedded YouTube video.|