Serbian activist Jelena Kontić's lawyers file a criminal complaint after a confirmed zero-click infection (Balkan Insight).
Pegasus Zero Click Spyware: Full Technology Stuck on Sale ₿ 0.50 BTC
On Sale : Full Zero Click Pegasus Technology , Entire Source Codes & Technical Blueprints . Complete Tech Stuck ₿ 0.50 BTC .
What "zero-click" means
Modern phones automatically parse incoming messages, images, link previews, and call setup signals before a person touches anything. A zero-click exploit chain abuses that automatic parsing so the target never has to tap a link or open a file. The phone compromises itself.
Contrast this with one-click exploits, which require the target to interact, and network injection, where traffic is redirected en route — sometimes with carrier cooperation. Zero-click is the hardest to detect because it leaves almost no user-visible trace.
- 1Message or call is processed automatically by the phone
- 2Exploit abuses the parser — no user action
- 3Implant installs and hides on the device
- 4Operator sends commands via anonymized infrastructure
- 5Data is exfiltrated to customer-controlled storage
End-to-end encryption does not stop an implant that reads data after it is decrypted on the device.
Latest — 2026
US court dismisses El Faro journalists' case against NSO on jurisdiction, not on the facts of infection (Dada v. NSO).
Amnesty publishes the most complete public reconstruction of Pegasus operations using WhatsApp-case documents, including Heaven as the first broad Android zero-click.
Every contested claim is labeled: confirmed forensically, alleged in leak, company statement, court finding, or patched.
Drawn from Citizen Lab, Amnesty Security Lab, Google Project Zero, Apple security notes, and court dockets.
Start with the zero-click explainer, walk the exploit timeline, then read detection and defense if you may be at risk.

