Spyware used to monitor investigative journalists in Hungary

Direkt36 says that the investigation also found some evidence suggesting that Hungarian state bodies are behind the surveillance.

The international investigation, named "Pegasus Project", involving a total of 17 newspapers including the Washington Post, the Guardian, Süddeutsche Zeitung, Die Zeit, and Le Monde gained access to a database of NSO clients' activities. The database contains more than 50,000 phone numbers that the project's research shows have been targeted by NSO clients for surveillance since 2016 in more than 50 countries around the world, according to Telex.hu.

The fact that a phone number appears in the database does not necessarily mean that Pegasus has been used against the targets, but in many cases, subsequent examination of the phones has shown that they have indeed been hacked. 

According to the findings, the targets included four journalists, including two Direkt36 staff members, Szabolcs Panyi and András Szabó, whose phones were subsequently found to have been hacked with NSO software. Direkt36 is the Hungarian partner of the "Pegasus Project".

Dávid Dercsényi, a former journalist for hvg.hu was also a target, as well as a fourth journalist who asked not to be named.

Other targets included a Hungarian photographer who worked with an American journalist who was covering the International Investment Bank's move to Budapest, Central Media Group owner Zoltán Varga and several other businessmen who attended a public affairs dinner at Varga's house in 2018. Subsequent investigations have confirmed that at least one guest's phone was certainly hacked with NSO's software.

The son of former oligarch Lajos Simicska was also targeted before the 2018 elections, when Simicska ran a media empire and openly attacked the government. According to Direkt36, Simicska himself did not use a smartphone at the time.

Adrien Beauduin, a foreign student at CEU who was detained by Hungarian authorities during an anti-government protest in 2018 was also targeted.

According to a report by The Guardian, Pegasus allows the attacker to view all content on a phone, such as messages from apps with end-to-end encryption, photographs, and GPS location data.

The program can also turn the infected device into an audio or video recorder.