Citizen Lab says the phone of a member of Europe’s PEGA Committee was infected twice with Pegasus, the NSO Group spyware that gave the panel its name.

It’s the latest batch of revelations about what makes the Intellexa-made spyware stand out from competitors.

The three had only just been added to the list in 2024, but a U.S. official said they had separated themselves from the company.

It was one of a trio of reports about the spyware vendor over the course of a day, with additional evidence about further infections among the findings.

The spyware’s developer, Intellexa, has been under pressure due to sanctions and public disclosure, but Recorded Future uncovered fresh activity.

Sanctions and public exposure might have driven Intellexa into silence for months, but that doesn’t mean its Predator spyware is gone for good.

Sanctions, newspaper investigations and reports exposing the Intellexa alliance’s infrastructure all might have led to its diminished state.

For the second time in six months, the operators of the Predator spyware burned down their infrastructure after it was publicly documented.

The operators of the Predator spyware rebuilt their infrastructure and operate in at least 11 countries after being exposed last year.