THE National Union of Journalists (NUJ) called for robust regulations to protect media workers today after an investigation revealed that reporters worldwide were spied on using Israeli hacking software.

The report by Paris-based not-for-profit media group Forbidden Stories found that at least 180 reporters were hacked using Pegasus software, a tool developed by the Israeli cyber-surveillance company NSO Group and sold to a number of clients, including state agencies. 

Pegasus infects iPhones and Android devices, enabling operators to extract messages, photos and emails, record calls and secretly activate microphones.

The report, compiled with the support of Amnesty International and an international reporting consortium, showed a list of more than 50,000 phone numbers of interest to NSO clients since 2016.

Human rights defenders, political opponents, lawyers, diplomats and heads of state were targeted, the probe found. Clients appeared determined to uncover sources, undermine research and, in some cases, stop journalists reporting.

The NUJ joined with the International Federation of Journalists (IFJ) to condemn the intrusions into the private communications of those working in the public interest.

They encouraged journalists to use extra vigilance to protect their data and called on governments to enshrine in domestic law the inviolability of journalists’ communications.

An international regulatory regime that allows the inspection of any organisations supplying products that have the capacity to undermine press freedoms is also needed, the unions stressed. 

NUJ general secretary Michelle Stanistreet said: “All concerned with bringing this story to light deserve the highest praise.

“[The report] underlines the dangers inherent in such powerful software. Without robust regulation, the access of rogue actors to our most intimate information is inevitable.”

The IFJ’s Tim Dawson warned that the software was being used to undermine democracy.

He said: “Allowing tyrants, despots and the enemies of freedom access to tools such a Pegasus is the 21st century equivalent of smashing printing presses and storming TV stations.”

Media outlets including the Guardian, Le Monde, the Washington Post, Die Zeit, Radio France and the Wire contributed to the investigation.

In a statement, NSO said the claims made about the activities of its clients are false as a list of phone numbers does not prove the devices were hacked. However, the company would “continue to investigate all credible claims of misuse and take appropriate action,” the statement said.