Pegasus spyware may have been used to hack the cellphones of journalists from the independent Novaya Gazeta Europe news website, the outlet reported Thursday.
The disclosure comes one day after Meduza, another leading independent Russian news website, said the spyware had been detected on the phone of its CEO Galina Timchenko in the first known case of Pegasus being used to hack a Russian journalist’s phone.
Novaya Gazeta Europe CEO Maria Epifanova and Novaya Gazeta Baltics journalist Yevgeny Pavlov said they both received alerts from Apple that their phones had been hacked by “state-sponsored actors.”
Epifanova said she received the alert from Apple that her phone had been hacked on Aug. 29. She complied with the company’s instructions to protect her phone, but did not pursue the matter further.
Pavlov, a Latvian citizen, told Novaya Gazeta Europe he received a similar email from Apple on the same day. He did not consider the alert to be important at the time but contacted the digital rights group Access Now after reading about Timchenko’s case.
While Pavlov’s phone did not behave unusually, Epifanova said that on Sept. 3 she received a Telegram alert saying that someone had logged into her account from Cairo. She has since changed her password.
Separately, Yevgeny Erlich, the former editor-in-chief of the Baltiya program on the Current Time broadcaster, said his phone may also have been hacked, reporting that his phone randomly heats up and creates group chats with his friends on messaging apps.
Pegasus spyware, designed by the Israeli firm NSO Group, can access messages and record calls and videos from a cellphone without its owner knowing. It can infect devices remotely without any action from the targeted individual.
Novaya Gazeta Europe said it could not confirm whether Pegasus was used to gain access to Epifanova’s phone, but that it had contacted Access Now for clarification.
Novaya Gazeta Europe and Meduza, which are based in European Union and NATO member Latvia, have both been outlawed in Russia as “undesirable” organizations.
The suspected hackings underscore the continued threats to Russian journalists who fled abroad amid their country’s crackdown on independent voices.
All of the recent victims live in Latvia and use Latvian SIM cards.
Meduza suggested that the Baltic country, along with Estonia and Germany, could have been behind the hackings. According to Citizen Lab, all three countries are clients of Pegasus.
Latvia’s State Security Service told Meduza that it “[does not] have information about a possible attack on Galina Timchenko's smartphone.”
Meduza also suggested that Kazakhstan and Azerbaijan, which are also Pegasus clients, could have hacked Timcheno’s phone on Moscow’s request.
A Message from The Moscow Times:
Dear readers,
We are facing unprecedented challenges. Russia's Prosecutor General's Office has designated The Moscow Times as an "undesirable" organization, criminalizing our work and putting our staff at risk of prosecution. This follows our earlier unjust labeling as a "foreign agent."
These actions are direct attempts to silence independent journalism in Russia. The authorities claim our work "discredits the decisions of the Russian leadership." We see things differently: we strive to provide accurate, unbiased reporting on Russia.
We, the journalists of The Moscow Times, refuse to be silenced. But to continue our work, we need your help.
Your support, no matter how small, makes a world of difference. If you can, please support us monthly starting from just $2. It's quick to set up, and every contribution makes a significant impact.
By supporting The Moscow Times, you're defending open, independent journalism in the face of repression. Thank you for standing with us.
Remind me later.
