Skip to content
PRA/Last Research Update: October 2026
Latest Developments →

Full Zero Click Pegasus Technology, Entire Source Codes & Technical Blueprints. Complete Tech Stack ₿ 0.50 BTC. Contact us.

Pegasus Exploit Timeline

A chronological history of Pegasus, NSO Group, documented exploits, and key legal/policy developments from 2010 to 2026.

2010

NSO Group Founded

NSO Group Technologies founded in Herzliya, Israel by Niv Karmi, Omri Lavie, and Shalev Hulio.

2014

Francisco Partners Acquisition

Francisco Partners acquires NSO Group for $130M.

2016

Trident Discovered

Citizen Lab and Lookout document the Trident exploit chain targeting Ahmed Mansoor, a UAE human rights activist. First public documentation of Pegasus.

2016

Apple Patches Trident

Apple releases iOS 9.3.5 patching the Trident vulnerabilities.

2017

Pegasus on Android

Lookout and Citizen Lab document the first Android variant of Pegasus.

2018

WhatsApp Integration

Reports emerge of Pegasus delivery via WhatsApp vulnerabilities.

2019

KISMET Discovered

Citizen Lab documents KISMET, a zero-click iMessage exploit targeting iOS 12.

2019

WhatsApp v. NSO Lawsuit

WhatsApp/Meta sues NSO Group in US federal court for exploiting WhatsApp's call feature to deliver Pegasus to ~1,400 targets.

2019

Novalpina Acquisition

Novalpina Capital acquires NSO Group from Francisco Partners.

2020

Twitter Notification

Twitter sends notifications to users it identified as targets of state-sponsored attacks, later linked to Pegasus.

2021

FORCEDENTRY Discovered

Citizen Lab documents FORCEDENTRY, a zero-click iMessage exploit using a PDF vulnerability (CVE-2021-30860) to deliver Pegasus.

2021

Pegasus Project Published

Forbidden Stories and Amnesty International publish the Pegasus Project investigation, revealing 50,000+ phone numbers on a leaked target list.

2021

Apple v. NSO Lawsuit

Apple sues NSO Group in US federal court for targeting Apple users with FORCEDENTRY.

2021

US Entity List

The US Commerce Department adds NSO Group to the Entity List, restricting access to US technology.

2021

Apple Threat Notifications

Apple begins sending Threat Notifications to users targeted by state-sponsored attackers.

2022

Lockdown Mode Introduced

Apple introduces Lockdown Mode in iOS 16, an extreme security setting to block mercenary spyware.

2022

EU PEGA Committee

The European Parliament establishes the PEGA Committee to investigate Pegasus use in EU member states.

2022

Israel Export Controls

Israel's Defense Ministry tightens export oversight of NSO Group.

2022

Cytrox Entity List

The US adds Cytrox (Intellexa consortium) to the Entity List.

2023

BLASTPASS Discovered

Citizen Lab documents BLASTPASS, a zero-click iMessage exploit using a PassKit vulnerability (CVE-2023-41064) to deliver Pegasus.

2023

Apple Rapid Security Response

Apple releases an emergency Rapid Security Response patching BLASTPASS.

2023

Quadream Exposed

Israeli newspaper Calcalist exposes Quadream, another Israeli spyware vendor similar to NSO Group.

2024

LOCKDOWN-LESS Discovered

Citizen Lab documents a Pegasus variant that exploited iOS 17 even on devices with Lockdown Mode enabled. Apple patches in iOS 17.4.1.

2024

EU AI Act

The EU AI Act enters into force, with provisions relevant to surveillance technology.

2024

WhatsApp Wins District Court Ruling

The US district court rules in favor of WhatsApp in WhatsApp v. NSO Group, finding NSO violated federal and state hacking laws.

2025

WhatsApp Jury Verdict: $167M Damages

A jury awards WhatsApp $167 million in damages against NSO Group. The district court enters a permanent injunction barring NSO from ever targeting WhatsApp and its users again.

2025

Chromium-based Android Exploit

Google TAG documents a Chromium-based zero-click exploit targeting Android devices, linked to a mercenary spyware vendor.

2026

Intellexa Founder Sentenced to 8 Years

A Greek court sentences the founder of Intellexa and three others to 8 years in prison over the Greek spyware scandal — the first-ever criminal conviction of spyware company executives.

2026

Citizen Lab: Espionage Against European Parliament

Citizen Lab documents Pegasus targeting of a member of a committee investigating spyware use, representing espionage against the European Parliament (July 3, 2026).

2026

Amnesty 'Inside Pegasus' Published

Amnesty International Security Lab publishes its most complete analysis of Pegasus to date, based on internal NSO Group documents from the WhatsApp litigation. Reveals NSO's active operational role through 'White Services' team, PATN, and 24/7 NOC (July 31, 2026).

2026

WhatsApp Files Contempt Against NSO

WhatsApp asks the court to hold NSO Group in contempt for violating the permanent injunction, citing continued NSO-linked spearphishing attempts and test account creation on WhatsApp (June 8, 2026).

2026

Apple Threat Notifications: 110 Countries

Apple sends a new batch of threat notifications to users in 110 countries. Updated delivery now includes iPhone Lock Screen and Settings. Total reach: 150+ countries since 2021 (August 13, 2026).

2026

Citizen Lab: Serbian Activist Infected

Citizen Lab confirms Pegasus infection of a Serbian pro-democracy student activist, demonstrating continued use against civil society in Europe (September 2, 2026).

2026

New iMessage Variant

Citizen Lab documents a new Pegasus iMessage variant targeting iOS 18. Apple patches in iOS 18.3.

A Spy In Your Pocket — Pegasus spyware can secretly access your photos, calls, messages, camera, microphone, GPS and more