How Pegasus phone spyware used to target 30 Thai activists, cyber watchdogs say

The probe by Thai human rights group, Southeast Asian internet watchdog Digital Reach and Toronto-based Citizen Lab, followed a mass alert from Apple Inc in November informing thousands of iPhone users, including in Thailand, that they were targets of "state-sponsored attackers".

Pegasus has been used by governments to spy on journalists, activists, and dissidents and the Israeli firm behind it, NSO Group, has been sued by Apple and placed on a US trade blacklist.

 

Law in its report on Monday (Jul 18) said 24 political activists, three academics and three members of civil society groups were targeted between October 2020 and November 2021, ranging from one to 14 hacking incidents each.

 

Yingcheep Atchanont,  manager at, was among those hacked and said his group would investigate further, and pursue legal action once it becomes clear who in Thailand was operating Pegasus.

 

"NSO has said that they only sell the software to governments and that all the victims here are Thai government critics, so they benefited the most," he said.

NSO Group and a spokesperson for Thailand's government did not immediately respond to requests for comment.

Wetang Phuangsup, a spokesperson for Thailand's ministry of Digital Economy and Society, said his ministry was not aware of any usage of spyware by the government.

 

Citizen Lab's report, which was examined digital traces left in the victims' phones and identified Pegasus usage in Thailand as far back as May 2014.

 

John, a Citizen Lab researcher, said the investigation showed Pegasus was being operated in Thailand, with many more hacking victims likely.

 

"What we uncovered is a lot of targeting of dozens of people over a specific time frame, but having done investigation into Pegasus ... over the decade, I am confident that it is the tip of the iceberg," he said in an online presentation on Monday.

The judge has also lifted the secrecy of the documents related to the case, the statement said, paving the way for the disclosure of some details kept confidential until now.

 

The court had already asked NSO to give information on some aspects of the Pegasus spyware, which was reportedly used in other parts of the world by authoritarian rulers to spy on opposition politicians and civil society activists.

The data leak contained more than 50,000 phone numbers suspected to be infected with Pegasus. They belong to hundreds of business executives, religious figures, academics, NGO employees, union officials and government officials, including ministers, presidents and prime ministers.

 

Notable individuals in this list include French President Emmanuel Macron, Financial Times editor Khalaf and people close to slain Saudi dissident Jamal Khashoggi.

 

Prior to this, a Canada-based research group found in 2018 that infected phones could be in Thailand. 

 Describes itself on its website as a "privately funded company dedicated to providing highly information security services to our clients". It was founded in 2004 and is based at the Warehouse Complex on 102F Road.

According to its website, the company's services include research, consulting and education, in areas such as computer security, malware analysis and penetration testing. Accounting and Corporate Regulatory Authority records show that it is a live company.

Mr Thomas, according to his LinkedIn page. His most recent post, about a month ago, said he could help anyone to hire "trained and certified" cybersecurity professionals.

Enjoyed this article? Stay informed by joining our newsletter!

Comments

You must be logged in to post a comment.

About Author