Of the 67 phones Amnesty's Security Lab probed, 34 were iPhones, of which 23 showed signs of a successful Pegasus infection and 11 showed attempts at infection
The text delivered last month to the iPhone 11 of Claude Mangin, the French wife of a political activist jailed in Morocco, made no sound.
Context & Ripple Effects
The iPhone findings sit alongside evidence from India, where checks of selected phones found NSO malware on seven devices, including among a group that included opposition politicians. Amnesty also released a device-scanning toolkit for iPhone and Android users, turning a closed forensic investigation into a repeatable check for suspected targets.
The reporting broadens the record from individual allegations to cross-border forensic evidence. It was later reinforced by French government findings on journalists’ phones, which were referred to prosecutors.
First-order effects
- Amnesty’s Security Lab has documented successful Pegasus infections and attempted infections among the iPhones it examined, giving affected users forensic grounds to treat silent-message incidents as potential compromise.
- Pegasus targets—including activists, journalists, officials and executives identified in the related investigation—gain a practical route to assess devices through Amnesty’s published toolkit.
Second-order effects
- The India cases and the iPhone results make Pegasus scrutiny a transnational issue for governments whose political figures, journalists and activists appear among examined targets.
- Forensic evidence shifts disputes over alleged surveillance toward independently reproducible device analysis, increasing the significance of labs and tools that can validate compromise claims.
Third-order effects
- Repeated technical findings across countries point to commercial spyware becoming a persistent accountability problem: the operational question increasingly extends beyond who was targeted to who can independently verify it.
- If public scanning tools and official examinations continue to corroborate one another, oversight pressure will concentrate on the states and vendors connected to spyware deployments rather than on isolated victim accounts.
The trend: Commercial spyware allegations are moving from opaque claims to a growing body of cross-border forensic evidence and public verification tools.