20 July 2021
20 July 2021
The Media Freedom Rapid Response (MFRR) is highly alarmed by the revelations by a consortium led by French NGO Forbidden Stories about the surveillance of journalists, human rights defenders, lawyers and others through the Pegasus spyware program developed by Israeli company NSO Group. The leak, which revealed the involvement of the Hungarian government among others, raises significant implications for journalists’ security and the protection of their sources as well as raising concerns through the chilling effect such applications have on journalists beyond those immediately affected and ultimately, on everyone’s right to information.
We call on the Hungarian government and other implicated governments to immediately stop using the spyware and to provide transparency about its application so far. We also call on the NSO Group to take its corporate social responsibility more seriously and stop selling Pegasus to regimes with poor human rights and media freedom records, provide more transparency that will enable proper oversight and establish more stringent due diligence processes.
Forbidden Stories obtained leaked records of phone data, suggesting that various governments worldwide selected media workers, lawyers and activists as possible targets for invasive surveillance with the Pegasus spyware. The spyware has the potential to transform the targets’ phones into surveillance devices, allowing access to all data on the phone and enabling control over audio and video to make recordings surreptitiously. Inclusion of a phone number on the leaked list does not necessarily entail that the linked device was successfully hacked, but forensic analysis on dozens of phones so far effectively shows evidence of Pegasus activity in more than half of the cases. NSO Group has repeatedly said that its spyware, which they sold to some of the world’s most repressive regimes, is meant for use only against terrorists and serious criminals. Unsurprisingly, despite claims by NSO Group that they will cut off clients if they misuse the spyware, it appears that Pegasus has been used well beyond this stated intended target group by those clients, to potentially include anyone perceived as an opponent or threat to the regime.
In the European Union, forensic analysis of several devices has shown that the Hungarian government has deployed the spyware program against investigative journalists and the circle of one of the country’s last remaining independent media owners. At least five journalists figure in the leaked records and at least ten lawyers and an opposition politician. They include Szabolcs Panyi, a well-known reporter at investigative outlet Direkt36, who has been publicly attacked in the past by Prime Minister Viktor Orbán’s spokesperson Zoltán Kovács, who has accused him of “Orbánophobia”. Also analysis of his colleague András Szabó’s phone showed positive results for the use of Pegasus. Other Hungarian media workers selected for potential targeting include Dávid Dercényi, who edits a newspaper put out by the authority of an opposition-run district in Budapest; a photographer who worked as a fixer for visiting foreign journalists; and, a well-known investigative journalist. Furthermore, it appears also the circle of investor Zoltán Varga, who owns several independent media outlets and has been pressured in the past, was surveilled using the Pegasus software.
In a response quoted in The Guardian, the Hungarian government said that “state bodies authorised to use covert instruments are regularly monitored by governmental and non-governmental institutions.” The country has a very permissive legal framework for surveillance. In 2020, the justice minister approved 1,285 surveillance requests (not necessarily using Pegasus spyware).
The most recent revelations about Pegasus serve to highlight two things. On the one hand, they underscore the urgent need for meaningful reforms that will ensure powerful commercial technology is not abused by governments at the expense of civil liberties. They also show the essential role watchdog journalism plays in safeguarding the human rights that underpin democracy, by exposing violations and holding the perpetrators to account.
Article 19
European Centre for Press and Media Freedom (ECPMF)
European Federation of Journalists (EFJ)
Free Press Unlimited (FPU)
International Press Institute (IPI)
Osservatorio Balcani e Caucaso Transeuropa (OBCT)
This statement is part of the Media Freedom Rapid Response (MFRR), an Europe-wide mechanism, which tracks, monitors and responds to violations of press and media freedom in EU Member States and Candidate Countries. This project provides legal and practical support, public advocacy and information to protect journalists and media workers. The MFRR is organised by an consortium led by the European Centre for Press and Media Freedom (ECPMF) with ARTICLE 19, the European Federation of Journalists (EFJ), Free Press Unlimited (FPU), the Institute for Applied Informatics at the University of Leipzig (InfAI), International Press Institute (IPI) and CCI/Osservatorio Balcani e Caucaso Transeuropa (OBCT). The project is co-funded by the European Commission. www.mfrr.eu
ECPMF and 79 civil society and journalists' associations are calling on European Parliament to ensure that journalists are completely protected from spyware in the European Media Freedom Act.
READ MOREWe are highly concerned about the alleged surveillance of journalist Makarios Drousiotis, and the lack of prompt, adequate or thorough investigation of the matter.
READ MOREWe call on the European Parliament to strengthen the EMFA’s state advertising provisions and by doing so, ensure that media freedom can flourish in the European Union.
READ MOREWe call on the government of Malta to publish without further delay the report by the Committee of Experts on Media, the body tasked with advising the Government on implementing the recommendations of the Public Inquiry into the assassination of Daphne Caruana Galizia.
READ MOREWe, the undersigned journalists, press freedom organizations, and unions, write this statement to denounce the war crimes committed by the Russian Federation against journalists in Ukraine and to call for immediate action to hold the perpetrators accountable.
READ MOREThe undersigned journalists’ and media freedom organisations strongly condemn the recent attacks against Greek journalists Giorgos Papachristos and Kostas Vaxevanis and call on the authorities to swiftly investigate the attacks.
READ MOREAll content available on the ECPMF website is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
Menckestr. 27
04155 Leipzig / Germany
Tel: +49 (0) 172 367 499 0
Fax: +49 (0) 341 562 96 63
E-Mail: info@ecpmf.eu
www.ecpmf.eu
© Copyright 2022 – ECPMF
European Centre for Press and Media Freedom
Cookie | Duration | Description |
---|---|---|
_mcid | 1 year | This is a Mailchimp functionality cookie used to evaluate the UI/UX interaction with its platform |
Cookie | Duration | Description |
---|---|---|
_ga | 2 years | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
_gat_gtag_UA_84831681_1 | 1 minute | Set by Google to distinguish users. |
_gid | 1 day | Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. |
ahoy_visit | 4 hours | This cookie is set by Powr for analytics measurement. |
ahoy_visitor | 2 years | This cookie is set by Powr for analytics measurement. |
CONSENT | 2 years | YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data. |
s_vi | 2 years | An Adobe Analytics cookie that uses a unique visitor ID time/date stamp to identify a unique vistor to the website. |
Cookie | Duration | Description |
---|---|---|
VISITOR_INFO1_LIVE | 5 months 27 days | A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. |
YSC | session | YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages. |
yt-remote-connected-devices | never | YouTube sets this cookie to store the video preferences of the user using embedded YouTube video. |
yt-remote-device-id | never | YouTube sets this cookie to store the video preferences of the user using embedded YouTube video. |
Cookie | Duration | Description |
---|---|---|
_reporter_session | session | No description |