By jurisdiction
Country Dossiers
Last updated 8 October 2026
For each: what is alleged, what is forensically confirmed, the official response, and the status as of October 2026. Predator (Cytrox / Intellexa) and Graphite (Paragon) are different products, mentioned only to avoid confusion with Pegasus.
Mexico
Forensically confirmed- Alleged
- Earliest and largest reported customer use, 2011–2017 (Citizen Lab). Hundreds of numbers on the 2021 list including then-candidate AMLO's circle.
- Confirmed
- Journalist Cecilio Pineda selected weeks before his 2017 killing.
- Official response
- Government agencies and Mexican companies implicated in early reporting.
Saudi Arabia
Forensically confirmed- Alleged
- Khashoggi associates targeted.
- Confirmed
- Citizen Lab 2018 'The Kingdom Came to Canada' on Omar Abdulaziz.
- Official response
- NSO has denied specific allegations.
UAE
Forensically confirmed- Alleged
- Customer since early reporting; Ahmed Mansoor case.
- Confirmed
- Ahmed Mansoor, August 2016 — the case that put Pegasus in public view.
- Official response
- Later reporting on UAE as a customer.
India
Partially confirmed- Alleged
- 2019 WhatsApp notifications to journalists, lawyers, activists; 2021 Pegasus Project selections.
- Confirmed
- Forensic infections confirmed on a subset, including journalists at The Wire.
- Official response
- Supreme Court appointed a committee; government did not confirm or deny purchase in open court.
Hungary
Forensically confirmed- Alleged
- Direkt36 and Pegasus Project forensic cases against journalists and a photographer.
- Confirmed
- Forensic cases documented.
- Official response
- Government acknowledged use and said it was lawful.
Morocco
Partially confirmed- Alleged
- Pegasus Project and later Forbidden Stories reporting, including journalists and French targets.
- Confirmed
- Amnesty July 2026 notes a new Forbidden Stories Morocco investigation tied to the document release.
- Official response
- Morocco has previously denied wrongdoing.
Spain / Catalonia
Forensically confirmed- Alleged
- Extensive mercenary-spyware targeting of Catalan figures.
- Confirmed
- Citizen Lab 'CatalanGate' (April 2022) — Pegasus and Candiru.
- Official response
- Spanish officials later acknowledged some targeting of Catalan figures was authorized; other cases disputed.
El Salvador
Forensically confirmed- Alleged
- El Faro journalists, at least 226 infections June 2020–November 2021.
- Confirmed
- Knight First Amendment Institute complaint.
- Official response
- Dada v. NSO dismissed 30 September 2026 for lack of personal jurisdiction.
Thailand
Partially confirmed- Alleged
- iLaw and activists reported Pegasus targeting around 2020–2021.
- Confirmed
- Civil cases ongoing.
- Official response
- Prachatai reported NSO general counsel Shmuel Sunray testified September 2026; verdict scheduled 21 November 2026.
Greece
Forensically confirmed- Alleged
- Mostly associated with Cytrox Predator.
- Confirmed
- Citizen Lab 3 July 2026: former MEP Stelios Kouloglou infected with Pegasus on or about 21 October 2022 and 6–7 March 2023.
- Official response
- No government customer named in that report. Criminal complaint reported 28 September 2026.
Serbia
Forensically confirmed- Alleged
- First forensically confirmed Pegasus infection in the country.
- Confirmed
- Citizen Lab + SHARE, 2 September 2026 — iMessage zero-click, Dec 2025–Jan 2026, patched iOS 18.4.1.
- Official response
- BIA dismissed the findings; President Vučić called them suspicions. Criminal complaint filed 6 October 2026.
Poland, Bahrain, Rwanda, Azerbaijan, Kazakhstan, Togo
Alleged- Alleged
- Included only at the public reporting level — alleged or partially confirmed.
- Confirmed
- Link to Citizen Lab or Pegasus Project sources.
- Official response
- See source library.
Not Pegasus: Predator is made by Cytrox / Intellexa; Graphite by Paragon. They are different products from different companies. Greece's targeting is mostly associated with Predator; the Kouloglou case (Citizen Lab, 3 July 2026) is the confirmed Pegasus exception.
On Sale : Full Zero Click Pegasus Technology , Entire Source Codes & Technical Blueprints .
Complete Tech Stuck ₿ 0.50 BTC .
