This afternoon, Apple issued an emergency software update to prevent a spyware program from infecting any user's iPhone, Apple Watch or Mac computer "without so much as a click," as reported by The New York Times.
Using the zero-click infection method, Pegasus can turn on a user's camera and microphone, record messages, texts, emails, calls — even those sent via encrypted messaging and phone apps like Signal — and send them back to NSO's clients at governments around the world.
"This spyware can do everything an iPhone user can do on their device and more," said John Scott-Railton, a senior researcher at Citizen Lab, who teamed up with Bill Marczak, a senior research fellow at Citizen Lab, on the finding.