Two Thai opposition MPs warned their phones have been targeted by spyware

Leaders of the People’s Party and Democrat Party have revealed that their phones may have been compromised by the sophisticated Pegasus spyware after Apple issued the latest round of notifications to victims. The same warning was given following the 2020 mass protests when Thai pro-democracy activists, journalists, politicians and academics were notified of being the targets of state-sponsored attacks.

MP Abhisit Vejjajiva, leader of the opposition Democrat Party, revealed on Monday (2 November) that his phone received a notification from Apple saying that his phone was targeted by a highly sophisticated surveillance spyware. On Tuesday (3 November), Natthaphong Ruengpanyawut, leader of the opposition People’s Party, revealed that he received the same notification, according to iLaw.

It is noticeable that the notifications came ahead of the upcoming no-confidence debate on 7-11 December and coincided with the opposition’s preparations to scrutinise the government, particularly over the Senate selection fraud. It remain unclear at this time who is responsible for the attacks. 

Apple issued the latest round of threat notifications in late October to iPhone users who may have been targeted by mercenary spyware.

According to public reporting and research by civil society organizations, technology firms, and journalists, individually targeted attacks have historically been associated with state actors, including private companies developing mercenary spyware on their behalf, such as Pegasus from the Israeli NSO Group.

The Pegasus spyware can infiltrate a target’s device without the use of clickbait lures employed in other hacks, and an automatic tracking record erasure that removes software footprints. It allows attackers to gain complete control over an infected phone, providing access to photos, videos, messages and call records. It can also be used to turn on phone cameras and microphones, allowing hackers to observe real-time situations without the knowledge of the phone owners.

The NSO Group claims that Pegasus is sold only to law enforcement and government agencies, and purchases must be approved by the Israeli government. Pegasus and the NSO Group have been under fire after the governments of several countries reportedly used the spyware to target their political opponents.

In late 2021, at least 35 Thai pro-democracy activists, journalists, politicians, and academics received notifications from Apple that their phones were attacked by the spyware. 

In 2023, activist Jatupat Boonpattararaksa, one of those attacked by the spyware, sued the NSO Group in the Thai Civil Court, claiming damages of 2,500,000 baht for violation of his privacy. However, the Civil Courtdismissed the case, saying that he had insufficient evidence to prove that the company had violated his privacy.

Human rights lawyer Anon Nampa and iLaw Director Yingcheep Atchanont filed a petition in June 2023 against nine government agencies with the Administrative Court. The case is currently ongoing.