Pegasus is military-grade spyware that can turn a phone into a pocket bug without the owner tapping anything. It is sold by NSO Group to government clients and has been linked to surveillance of journalists, activists, lawyers, and politicians. In 2021, Amnesty International reported that the Pegasus Project reviewed a leaked list of more than 50,000 phone numbers allegedly selected for possible targeting by NSO clients [source: Amnesty International]. That number is why Pegasus is not just another “phone hack” story.
TLDR: Pegasus, Predator, and similar tools are high-end mobile surveillance systems used to infect iPhones and Android phones, often through hidden flaws. Pegasus is the best-known, while Predator has been tied to several political spying scandals. For example, a target could receive no suspicious link at all, yet their phone may still be infected through a zero-click attack. The risk is low for most people, but for reporters, dissidents, diplomats, and executives, one compromised phone can expose years of messages, calls, photos, and contacts.
What Pegasus Can Do
Pegasus is not basic stalkerware. It does not need clumsy access to your unlocked phone. Once installed, it can silently collect data and send it to an operator.
Typical capabilities include:
- Reading messages from apps such as WhatsApp, Signal, iMessage, and Telegram after they are decrypted on the device.
- Recording calls and stealing call logs.
- Turning on the microphone or camera without obvious signs.
- Tracking location in real time.
- Copying photos, files, contacts, emails, and passwords stored on the phone.
- Hiding itself and trying to remove traces after use.
The ugly part is encryption does not fully save you. Encrypted apps protect data in transit. Pegasus waits until the message appears on your screen, then grabs it there. That feels unfair because it is. You did the “secure” thing, and the phone itself became the weak point.
Pegasus vs Predator
Pegasus is made by NSO Group, an Israeli company. It is known for very advanced infection methods, including zero-click exploits. These attacks may work through services such as iMessage or missed calls. The target may see nothing. No link. No pop-up. No weird app.
Predator is linked to the Intellexa alliance and Cytrox. It has appeared in cases involving politicians, journalists, and civil society figures in Europe, Africa, and the Middle East. Predator has often been associated with link-based attacks, where the target is tricked into opening a malicious web page. Google’s Threat Analysis Group has reported on commercial spyware vendors using exploit chains against Android and iOS users [source: Google Threat Analysis Group].
So, what is the real difference?
- Pegasus: famous for stealth, zero-click attacks, and deep phone access.
- Predator: often seen in targeted political spying and malicious link campaigns.
- Both: built for surveillance, sold to state-linked customers, and aimed at high-value targets.
The catch is that victims rarely know which tool hit them. Forensic experts may need logs, backups, crash reports, and days of analysis. Expect to waste time on uncertainty. That is part of the design.
How Other Mobile Surveillance Tools Compare
There are several layers below Pegasus and Predator.
Commercial stalkerware is the cheap end. It is often marketed to jealous partners or abusive employers. It usually needs physical access to the phone or a tricked installation. It can read messages, track location, and monitor calls, but it is easier to spot and remove.
Lawful intercept tools are used by police and intelligence agencies through telecom networks. These may track calls, location, and metadata. They may not need malware on the phone at all.
Remote access trojans, or RATs, are used by criminals and state-backed groups. Some are crude. Some are polished. They spread through phishing, fake apps, infected attachments, or app store abuse.
Forensic extraction tools, such as devices used at borders or police stations, are different. They usually need physical possession of the phone. They can copy large amounts of data if the device is unlocked or vulnerable.
Who Is Most at Risk?
Most people are not worth a million-dollar spyware operation. That is the blunt truth. These tools are expensive, risky for the operator, and often reserved for specific targets.
Higher-risk groups include:
- Investigative journalists
- Human rights workers
- Opposition politicians
- Diplomats and military staff
- Executives working on sensitive deals
- Lawyers handling political or corruption cases
Still, spillover happens. A target’s friends, family, sources, and coworkers can be pulled into the net. One infected phone can expose an entire network of conversations.
How to Reduce the Risk
No checklist can make a phone invincible. But you can raise the cost of attacking it.
- Update your phone fast. Many spyware attacks depend on old security flaws.
- Use Lockdown Mode on iPhone if you are at high risk. It limits risky features.
- Restart your phone daily during sensitive travel or reporting. Some infections may not survive a reboot.
- Avoid strange links, even from people you know.
- Use separate devices for risky work and personal life.
- Get expert help if you suspect infection. Do not wipe the phone first, or you may destroy evidence.
Why This Keeps Happening
Spyware exists because phones hold everything. They know where we go, who we trust, what we read, and what we fear. For governments and private operators, that is too tempting.
Pegasus and Predator show how far mobile surveillance has moved beyond clumsy phishing. The modern target may do nothing wrong and still lose control of a device. That is what makes these tools so disturbing. They attack the bond between people and the small screen they carry all day.
The best defense is not panic. It is speed, caution, and good device hygiene. Patch quickly. Separate sensitive work. Treat strange messages with suspicion. And if your work makes powerful people angry, assume your phone deserves serious protection.