HOMAGE
A zero-click capability identified during the CatalanGate research, affecting older iOS versions. Citizen Lab distinguished forensic evidence of HOMAGE from speculation about its full scope.
Last Verified 2026-10-01Author Pegasus Research ArchiveEditor Editorial Team
- 01Year: 2022 · Platform: iOS · Vector: iMessage (zero-click capability)
- 02Interaction: Zero-click (no user interaction required)
- 03No public CVE assigned
- 04Discovered by: Citizen Lab
- 05Patched: Subsequent iOS updates
Technical Description
HOMAGE was identified as part of the exploit chain analysis in the CatalanGate investigation, associated with iMessage-based zero-click delivery on older iOS.
Zero-Click Relevance
Zero-Click Vector
HOMAGE is a documented zero-click capability within the CatalanGate evidence set, clearly distinguished from unverified claims.
Attribution
Attributed to Pegasus operators by Citizen Lab in the CatalanGate report.
FORENSICALLY CONFIRMED
“HOMAGE is a Pegasus exploit.”
Attributed to Pegasus operators by Citizen Lab in the CatalanGate report.
CL-2022-04
What NSO Group Says
NSO Group has generally not commented on specific exploit names.
Last Verified 2026-10-01Author Pegasus Research ArchiveEditor Editorial Team
