It was one of those hazy and dry Delhi evenings, in October 2019, when my sources approached me with some startling information. People they knew had had their cell phones, and all their data on it, compromised by a dangerous software for at least two weeks in May that year—around the time of India’s general elections. They were contacted by Citizen’s Lab, an interdisciplinary laboratory based at the University of Toronto focussing on research, development, and high-level strategic policy and legal engagement on information and communication technologies, human rights and global security. WhatsApp too formally alerted these individuals that they had been targets of state-of-the-art surveillance.
After contacting two dozen academics, lawyers, Dalit activists and journalists, I finally wrote for the news daily I was working for at the time that a prohibitively expensive cyberweapon sold by the Israeli private company NSO had been used to surveil some of India’s citizens. NSO sells the software only to governments or their agencies.
That Pegasus has been in use in India, therefore, cannot be a revelation for the Narendra Modi government. By its own admission, the government has known about its use for over two years. Since the story broke, the Modi government has resorted to various tactics: silence, diversion, subterfuge and digression. Although it has never denied that it bought Pegasus, the government has never given a direct answer to any question. This type of response makes India an outlier amongst the “democracies” it usually likes to be compared with. Instead, given the way it is behaving, we appear to have more in common with the governments of Turkey, Azerbaijan, Saudi Arabia or the United Arab Emirates, all of which imagine that they are not accountable for their actions.