The French government found proof of Pegasus malware on three French journalists' phones and has referred its findings to the Paris public prosecutor's office
ban the exploit trade. https://www.theguardian.com/ ... John Scott-Railton / @jsrailton : UPDATE: 🇫🇷French Intelligence officially confirms Pegasus spyware found on phones of *more* reporters. Referred information to public prosecutor's office. More confirmation to the findings of the #PegasusProject. By: @kimwillsher1 https://www.theguardian.com/ ... https://twitter.com/... Asa Winstanley / @asawinstanley : “French intelligence investigators have confirmed that [Israeli company NSO Group's] Pegasus spyware has been found on the phones of three journalists, including a senior member of staff at the country's international television station France 24.” https://www.theguardian.com/ ... @wikileaks : France's national agency for information systems security (Anssi) confirms #Pegasus spyware found on the phones of three journalists | via Guardian #NSOGroup https://www.theguardian.com/ ... @swiftonsecurity : Gonna coordinate helpin some more torture https://twitter.com/... John Scott-Railton / @jsrailton : #NSOGroup, for years: why not investigate our competitors in the hacking industry? NSO this week: hey competitors...we're in this together, right? https://www.haaretz.com/... Eric Garland / @ericgarland : BREAKING: Netanyahu's cronies realizing that perhaps attacking its primary ally as well as all of NATO alongside Russia and China and Saudi...maybe is going badly. https://www.haaretz.com/...
Context & Ripple Effects
The confirmation closes the loop opened by the #PegasusProject reporting: French investigators independently verified NSO Group's spyware on three journalists' phones, including a senior newsroom staffer, and handed the evidence to the Paris public prosecutor rather than letting it stay a press story. The timing is awkward for Paris itself — sources reported that French officials were in the final stages of their own Pegasus purchase in July before abandoning it over claims that French politicians were targeted.
The referral also lands while NSO is already under pressure at home: Israel's government had just opened an abuse investigation and visited NSO's Tel Aviv office days earlier, giving the French prosecutor's file a second national inquiry to reinforce.
First-order effects
- Three named French journalists become officially confirmed victims of nation-grade phone intrusion, and the Paris public prosecutor now holds state-verified forensic evidence capable of grounding a criminal case against whoever directed the infections.
- NSO Group faces its first formal law-enforcement referral from a major EU government, converting press allegations from the Pegasus Project into prosecutable material.
Second-order effects
- Israel's own inquiry into NSO gains diplomatic cover and urgency — Paris's prosecutor file makes Tel Aviv's internal review harder to contain as a domestic reputational matter.
- Government customers must reprice the political risk of the tool: France walked away from a near-final purchase the same summer its own politicians were listed as targets, and NSO's core revenue base — deals worth hundreds of millions in Gulf states per prior sourcing — now sits alongside an active EU criminal investigation.
Third-order effects
- If prosecutions follow referrals, commercial spyware shifts from a deniable state instrument to one carrying personal legal liability for operators and clients, reshaping how vendor contracts allocate that exposure.
- The demand side does not disappear when one vendor is constrained: Citizen Lab's later finding that European journalists were hacked with Paragon's iPhone spyware shows the market rotating to newer vendors even as NSO absorbs the scrutiny — and platform makers like Apple keep absorbing the cost via emergency zero-day fixes.
The trend: Commercial spyware is being dragged from covert procurement into public legal accountability, with journalist infections serving as the recurring trigger and demand migrating to successive vendors as each one draws fire.