NSO Group Technologies, founded 2010 in Herzliya, Israel. Founders commonly reported as Niv Karmi, Omri Lavie, and Shalev Hulio. Francisco Partners acquired it in 2014; founders bought it back around 2019. In October 2025 a US investor group took controlling ownership for tens of millions; HQ remains in Israel.

How is Pegasus different from Predator and Graphite?

Predator is made by Cytrox / Intellexa; Graphite by Paragon. They are different products from different companies. They are mentioned here only to stop readers confusing them with Pegasus.

What does Pegasus cost and who can buy it?

NSO has stated it sells only to government customers and that sales require Israeli export approval. Reported pricing has varied widely and is not confirmed here. This archive does not provide procurement guidance and lists no current pricing.

Has NSO confirmed Pegasus exists?

NSO has publicly described its products in general terms and has denied specific allegations in litigation and statements. The existence and capabilities of Pegasus are established by forensic labs (Citizen Lab, Amnesty), vendor patches (Apple, WhatsApp), and court filings rather than by company marketing alone.

Can it read Signal and WhatsApp?

Yes — not by breaking their encryption, but by reading the content after it is decrypted on the device. A device-level implant sees what the user sees. This is why end-to-end encryption alone does not stop a resident implant.

What does 'zero-click' actually mean?

An exploit that infects the target with no action by the target — no tap, no open, no answered call. The phone's own automatic parsing of incoming messages, previews, or call setup signals is abused. Contrast with one-click (requires interaction) and network injection (traffic redirected en route).

Was the Serbia 2026 case zero-click?

Yes. Citizen Lab and SHARE Foundation (2 September 2026) documented an iMessage zero-click with a high-confidence infection window of December 2025–January 2026, patched as of iOS 18.4.1.

Is the exploit still unpatched?

No named chain in this archive is unpatched. Each chain listed was patched on the date given. However, new chains have historically followed patches, so an updated phone is necessary but not sufficient assurance.

What is an exploit chain?

A sequence of vulnerabilities chained together to get from initial access to a running implant. A single zero-click message often combines a parser bug, a memory-corruption primitive, and a privilege escalation, each patched separately by the vendor.

Does turning the phone off help?

Some chains (notably KISMET) did not work if the device had been rebooted and not since unlocked. Rebooting can clear a volatile implant but is not a reliable defense against persistent chains. Lockdown Mode plus timely updates are more meaningful.

How do I check my phone?

Keep iOS/Android fully updated. For a forensic check, Amnesty's Mobile Verification Toolkit (MVT) parses backups for indicators; iVerify is a commercial scanner. Absence of indicators is not proof of cleanliness, because zero-click implants can self-delete and logs rotate. A high-risk user should consult a trusted digital-security lab.

Does Lockdown Mode stop it?

Lockdown Mode reduces attack surface and has blocked some chains in Citizen Lab reporting. BLASTPASS showed it is not magic. It is recommended for high-risk users, not a guarantee.

What is an Apple threat notification?

Apple notifies users it believes were targeted by state-sponsored attackers. A notification means targeting was detected, not necessarily successful infection. The Serbia reporting cited at least 14 such notifications in the protest movement.

Will a factory reset remove Pegasus?

A full factory reset can remove a resident implant, but it also destroys evidence of infection. If you may pursue a forensic record or legal complaint, image the device or consult a lab before resetting.

Is Android safer than iOS, or vice versa?

Both platforms have had zero-click chains documented. Pegasus historically targeted iOS more heavily, but the WhatsApp 2019 campaign and the 'Heaven' Android zero-click show Android was also affected. Platform choice is not a substitute for updates and risk reduction.

Is selection on the leaked list proof I was hacked?

No. The Pegasus Project list of about 50,000 numbers shows selection by NSO customers. Selection is not proof of infection; forensic confirmation was possible only on a subset of phones.

Journalists, activists, lawyers, politicians, and their associates across many countries. The consortium published selections, not the full set, and redacted private individuals beyond already-public cases. This archive does not republish a target list.

Was Jamal Khashoggi's phone hacked?

Forensic reporting found his fiancée Hatice Cengiz was infected days after his murder, and his wife and son were selected or targeted. NSO has denied facilitating surveillance of Khashoggi. There is no public forensic confirmation of Khashoggi's own phone being infected.

How many people were actually infected?

There is no single confirmed total. The 2021 list shows ~50,000 selected numbers; the WhatsApp 2019 campaign reached ~1,400 users; the El Faro complaint cites 226+ infections. Confirmed infections are a subset of selections.

Did NSO lose the WhatsApp case?

Yes on liability. Summary judgment for WhatsApp 20 December 2024; a jury awarded $167,698,719 in May 2025; the court remitted punitive damages in October 2025 to a final judgment of $4,447,190, and a permanent injunction barring NSO from targeting WhatsApp users was entered 12 November 2025.

What happened to the El Faro journalists' case?

Dada v. NSO was dismissed on 30 September 2026 for lack of personal jurisdiction after a 2025 Ninth Circuit revival. The dismissal is procedural, not a finding that the infections did not happen.

Is NSO banned in the US?

NSO Group was added to the US Commerce Entity List on 3 November 2021 for supplying spyware used to target officials, journalists, activists, and embassy workers. Entity List restrictions limit access to US items; they are not a criminal ban.

Can victims sue a foreign government over spyware?

The UK Supreme Court ruled on 27 July 2026 that a foreign state is not immune from a UK civil claim over spyware used against people in the UK. It is a jurisdiction precedent, not a Pegasus-only ruling.

Did anyone go to prison?

No public record of NSO executives imprisoned for Pegasus operations as of this archive's date. Accountability has proceeded through civil judgments, export controls, and parliamentary inquiries rather than criminal convictions of the company's leadership.

Does this site host exploit code?

No. This archive hosts no exploit code, reproduction steps, target lists of private individuals, or procurement guidance. It documents the public record only.

Is this site affiliated with NSO, Apple, or Citizen Lab?

No. It is an independent public-record archive, not affiliated with NSO Group, Apple, WhatsApp, Citizen Lab, or Amnesty International.

How is evidence ranked here?

Court judgment ranks above forensic lab report, which ranks above a company document in a court filing, then major investigative consortium, then a single secondary blog. Secondary blogs are not used for uncorroborated exploit claims.

How often is this updated?

The site is updated as significant public-record items appear. The last-updated date appears on each page header and in the footer.

Frequently asked questions

FAQ

Q: What is Zero-Click Pegasus Spyware ?

The Full Zero Click Pegasus Technology , Entire Source Codes & Technical Blueprints . Complete Tech Stuck ₿ 0.50 BTC .

Last updated 8 October 2026

Plain answers to the questions this archive is asked most often. Every answer is grounded in the public record summarized across the site.

29 of 29 questions shown

What Pegasus is

Pegasus is commercial mercenary spyware built by Israel's NSO Group and sold to government customers. Later versions could infect iPhone and Android phones with zero clicks — no link tap, no attachment open, no answered call. This archive collects the public record through 8 October 2026.

How zero-click works

Detection and defense

The leaked list and victims

Legal and accountability

About this archive

On Sale : Full Zero Click Pegasus Technology , Entire Source Codes & Technical Blueprints .

Complete Tech Stuck ₿ 0.50 BTC .