{"id":46242,"date":"2022-04-18T20:17:14","date_gmt":"2022-04-18T20:17:14","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/"},"modified":"2022-04-18T20:17:14","modified_gmt":"2022-04-18T20:17:14","slug":"uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/","title":{"rendered":"UK Prime Minister, Catalan groups &#8216;targeted by NSO Pegasus spyware&#8217;"},"content":{"rendered":"<p>Citizen Lab has reported finding suspected surveillance software on devices associated with both the UK Prime Minister&#8217;s Office and what was formerly called the British Foreign and Commonwealth Office.<\/p>\n<p>The Canadian research outfit also said it had identified at least 65 individuals linked with Catalan civil society groups in Spain who were targeted by, or infected with, surveillance software. Catalonia is an autonomous region within Spain where there&#8217;s an ongoing politically divisive <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bbc.com\/news\/world-europe-29478415\">fight<\/a> for national independence.<\/p>\n<p>On Monday, Citizen Lab, a part of at the University of Toronto\u2019s Munk School, said it had found likely NSO Group Pegasus spyware infections on devices associated with UK Prime Minister Boris Johnson&#8217;s office, <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.gov.uk\/government\/organisations\/prime-ministers-office-10-downing-street\">10 Downing Street<\/a>, and on devices linked to the FCO, now called the FCDO, or the Foreign Commonwealth and Development office.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"condor\" data-xsm=\",fluid,mpu,\" data-sm=\",fluid,mpu,\" data-md=\",fluid,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>&#8220;We confirm that in 2020 and 2021 we observed and notified the government of the United Kingdom of multiple suspected instances of Pegasus spyware infections within official UK networks,&#8221; said Ron Deibert, director of the Citizen Lab and professor of political science at the University of Toronto\u2019s Munk School of Global Affairs &amp; Public Policy, in <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/citizenlab.ca\/2022\/04\/uk-government-officials-targeted-pegasus\/\">a statement<\/a>.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xmd=\",fluid,mpu,leaderboard,\" data-lg=\",fluid,mpu,leaderboard,\" data-xlg=\",fluid,billboard,superleaderboard,mpu,leaderboard,\" data-xxlg=\",fluid,billboard,superleaderboard,brandwidth,brandimpact,leaderboard,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<div class=\"adun_eagle_desktop_story_wrapper\">\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"mid\" data-raptor=\"eagle\" data-xxlg=\",mpu,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<\/p><\/div>\n<p>Deibert said the suspected infection associated with 10 Downing Street was linked to a Pegasus operator with ties to the United Arab Emirates while the FCO suspected infection appears to be linked to Pegasus operators associated with UAE, India, Cyprus, and Jordan.<\/p>\n<p>He cautioned that because the FCO\/FCDO have employees in various countries, the suspected infections observed may be related to devices located abroad that used foreign SIM cards, an attack vector seen in the compromised devices of US State Department personnel in Uganda in 2021.<\/p>\n<p>In November, 2021, a group of UK MPs urged Johnson <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.occrp.org\/en\/daily\/15489-uk-lawmakers-call-on-government-to-sanction-spyware-firm-nso\">to sanction<\/a> NSO Group as <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/11\/03\/us_sanctions_spyware\/\" rel=\"noopener\">the US<\/a> has done. NSO Group has been under fire from civil society groups for years for enabling authoritarian regimes to surveil and punish human rights advocates and journalists. The Israel-based firm was <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2019\/10\/29\/whatsapp_sue_nso_group\/\" rel=\"noopener\">sued<\/a> by Meta\/Facebook&#8217;s WhatsApp in 2019 for enabling the monitoring of WhatsApp&#8217;s Android users (and two years later <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/11\/23\/apple_nso_group\/\" rel=\"noopener\">by Apple<\/a>).<\/p>\n<p>The WhatsApp case has not gone well for NSO Group which only a week ago <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.washingtonpost.com\/world\/nso-turns-to-us-supreme-court-for-immunity-in-whatsapp-suit\/2022\/04\/11\/7e65e394-b9b0-11ec-a92d-c763de818c21_story.html\">asked<\/a> the US Supreme Court to recognize its claim of immunity as a foreign government agent, a gambit <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/11\/09\/nso_foreign_immunity_whatsapp_decision\/\" rel=\"noopener\">already twice rejected<\/a> by lower courts.<\/p>\n<h3 class=\"crosshead\"> <span>The rain in Spain<\/span><br \/>\n<\/h3>\n<p>With regard to Catalan groups in Spain, Citizen Labs <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/citizenlab.ca\/2022\/04\/catalangate-extensive-mercenary-spyware-operation-against-catalans-using-pegasus-candiru\/\">said<\/a> it has identified at least 63 individuals targeted with Pegasus, and another four targeted with Windows surveillance software from <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/07\/16\/microsoft_candiru_malware\/\" rel=\"noopener\">Candiru<\/a>, another Israel-based spyware maker that has <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/11\/03\/us_sanctions_spyware\/\" rel=\"noopener\">also been sanctioned<\/a> in the US. The victims, two of whom were linked both to Pegasus and Candiru, are said to include members of the European Parliament, legislators, jurists, members of civil society, and every Catalan president since 2010.<\/p>\n<p>In conjunction with the Catalan findings, Citizen Lab said multiple zero-click iMessage exploits were used to attack victims&#8217; iOS devices between 2017 and 2020. One of these the lab dubbed HOMAGE, an exploit for WebKit \u2013 the Safari browser code that Apple insists is <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2022\/02\/28\/apple_apps_challenge\/\" rel=\"noopener\">the only<\/a> rendering engine allowed on iOS for the sake of security.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xsm=\",fluid,mpu,\" data-sm=\",fluid,mpu,\" data-md=\",fluid,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>&#8220;The HOMAGE exploit appears to have been in use during the last months of 2019, and involved an iMessage zero-click component that launched a WebKit instance in the <code>com.apple.mediastream.mstreamd<\/code> process, following a <code>com.apple.private.alloy.photostream<\/code> lookup for a Pegasus email address,&#8221; CitizenLab said. &#8220;The WebKit instance in the <code>com.apple.mediastream.mstreamd<\/code> process fetched JavaScript scaffolding that we recovered from an infected phone.&#8221;<\/p>\n<p>The malware performs a test on the target device and, if it&#8217;s vulnerable, fetches the WebKit exploit. HOMAGE is believed to have been patched in iOS 13.2, released October 28, 2019. Citizen Lab also saw another exploit, <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/citizenlab.ca\/2021\/08\/bahrain-hacks-activists-with-nso-group-zero-click-iphone-exploits\/\">KISMET<\/a>, a zero-day used in mid-2020 against iOS 13.5.1 and iOS 13.7 before it was apparently patched in iOS 14.<\/p>\n<p>Citizen Lab said because its tools focus on iOS forensics, it believes Android-based Pegasus infections are undercounted. The research group did not attribute the Catalan surveillance to a particular entity but said there&#8217;s strong circumstantial evidence that Spanish authorities were involved.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" id=\"story_eagle_xsm_sm_md_xmd_lg_xlg\" data-pos=\"mid\" data-raptor=\"eagle\" data-xsm=\",mpu,dmpu,\" data-sm=\",mpu,dmpu,\" data-md=\",mpu,dmpu,\" data-xmd=\",mpu,dmpu,\" data-lg=\",mpu,dmpu,\" data-xlg=\",mpu,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>Amnesty International, which helped confirm Citizen Labs&#8217; findings, urged the Spanish government to say whether or not it is an NSO Group customer and called on the European Parliament to do more to stop human rights violations conducted using government-directed spyware.<\/p>\n<p>&#8220;We urge the European Parliament Committee of Inquiry to leave no stone unturned when documenting the human rights violations enabled by unlawful spyware, including by investigating these new revelations,\u201d said Likhita Banerji, Amnesty International\u2019s technology and human rights researcher, in <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.amnesty.org\/en\/latest\/news\/2022\/04\/spain-pegasus-spyware-catalans-targeted\/\">a statement<\/a>.<\/p>\n<p>&#8220;Governments around the globe have not done enough to investigate or stop human rights violations caused by invasive spyware like Pegasus. The use, sale and transfer of this surveillance technology must be temporarily halted to prevent further abuses of human rights.&#8221;<\/p>\n<p>A European Parliament Committee of Inquiry, formed following revelations about Pegasus use <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.amnesty.org\/en\/latest\/news\/2021\/07\/the-pegasus-project\/\">reported<\/a> in July 2021, is scheduled to hold its first meeting <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.europarl.europa.eu\/doceo\/document\/TA-9-2022-0071_EN.html\">on Tuesday<\/a> to discuss Pegasus and similar spyware.<\/p>\n<p><em>The Register<\/em> was unable to reach NSO Group for comment. \u00ae<\/p>\n<p> READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2022\/04\/18\/uk_catalan_spyware\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>UAE reportedly using &#8216;legal&#8217; malware on erstwhile allies Citizen Lab has reported finding suspected surveillance software on devices associated with both the UK Prime Minister&#8217;s Office and what was formerly called the British Foreign and Commonwealth Office.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-46242","post","type-post","status-publish","format-standard","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>UK Prime Minister, Catalan groups &#039;targeted by NSO Pegasus spyware&#039; 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"UK Prime Minister, Catalan groups &#039;targeted by NSO Pegasus spyware&#039; 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-04-18T20:17:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"UK Prime Minister, Catalan groups &#8216;targeted by NSO Pegasus spyware&#8217;\",\"datePublished\":\"2022-04-18T20:17:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/\"},\"wordCount\":839,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/\",\"name\":\"UK Prime Minister, Catalan groups 'targeted by NSO Pegasus spyware' 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"datePublished\":\"2022-04-18T20:17:14+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"contentUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"UK Prime Minister, Catalan groups &#8216;targeted by NSO Pegasus spyware&#8217;\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"UK Prime Minister, Catalan groups 'targeted by NSO Pegasus spyware' 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/","og_locale":"en_US","og_type":"article","og_title":"UK Prime Minister, Catalan groups 'targeted by NSO Pegasus spyware' 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-04-18T20:17:14+00:00","og_image":[{"url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"UK Prime Minister, Catalan groups &#8216;targeted by NSO Pegasus spyware&#8217;","datePublished":"2022-04-18T20:17:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/"},"wordCount":839,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/","url":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/","name":"UK Prime Minister, Catalan groups 'targeted by NSO Pegasus spyware' 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","datePublished":"2022-04-18T20:17:14+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/#primaryimage","url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","contentUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Yl4DN3fyboVYEPLwK-VLyAAAAQs&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/uk-prime-minister-catalan-groups-targeted-by-nso-pegasus-spyware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"UK Prime Minister, Catalan groups &#8216;targeted by NSO Pegasus spyware&#8217;"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/46242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=46242"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/46242\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=46242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=46242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=46242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}