{"id":"GRC-002","notes":"Coded Sep 25 2026. Pegasus, not Predator. Date = first infection; further infections 6–7 Mar 2023. Target was investigating spyware abuse at EU level.","country":"Greece","sources":[{"url":"https://securitylab.amnesty.org/latest/2026/07/joint-statement-pegasus-in-the-parliament-the-eu-must-act-now/","citation":"https://securitylab.amnesty.org/latest/2026/07/joint-statement-pegasus-in-the-parliament-the-eu-must-act-now/"}],"summary":"Forensic analysis found that the phone of Stelios Kouloglou was infected with NSO Group's Pegasus three times — on 21 October 2022 and on 6–7 March 2023 — while he served as a substitute member of the European Parliament's committee of inquiry into Pegasus and equivalent spyware (PEGA). The operator has not been identified. The findings were made public in July 2026.","tactics":[{"code":"TC-21","role":"primary","label":"Surveillance Infrastructure / Spyware Deployment","needs_review":false},{"code":"TC-51","role":"secondary","label":"Direct Intimidation of Journalists and Civic Actors","needs_review":false}],"version":1,"channels":["Covert spyware infection (Pegasus)"],"entities":[{"id":1159,"name":"Unidentified Pegasus customer (NSO sells only to governments)","role":"actor","entity_type":"Security Apparatus (suspected, unattributed)"},{"id":1160,"name":"Stelios Kouloglou, investigative journalist and then MEP, substitute member of the European Parliament's PEGA committee on spyware","role":"target","entity_type":"Individual — Politician / Journalist"}],"date_text":"21/10/2022","created_at":"2026-09-25T12:58:49.565817+00:00","escalation":5,"harm_track":"Track 3 — Operational Suppression","narratives":[],"report_ids":[],"signal_ids":[],"updated_at":"2026-09-25T12:58:49.565817+00:00","occurred_on":"2022-10-21","campaign_ids":[],"enabler_type":"","response_ids":["CR-GRC-002"],"trigger_type":"TR-08: Proactive / Ambient","campaign_phase":"","civic_response":"More than 40 organisations and experts, including Amnesty, Access Now, RSF and Privacy International, issued a joint statement (6 July 2026) demanding an independent investigation, action on the PEGA recommendations, remedies for victims and stronger export controls.","date_precision":"day","enabler_status":"","campaigns_served":[],"consequence_category":"Operational Suppression","institutional_consequence":"Data seizure/exposure; Chilling effect on parliamentary oversight"}