Forensic analysts from Amnesty International revealed the content of text messages likely meant to infect the phones of two more Polish citizens with Pegasus spyware. Both individuals have close links to opposition senator Krzysztof Brejza, who was himself a target of cyber espionage.
Ten artykuł czytasz w ramach bezpłatnego limitu

Follow the big issues that shape Polish politics and society by signing up to our weekly newsletter " News from Poland: Democracy at Stake ". It allows you to stay up to speed on developments concerning the ongoing assault on democratic institutions, rule of law, and human rights in Poland.

On Thursday, Wyborcza and Die Zeit revealed the names of two more high-profile Polish citizens targeted by a client of the Israeli technology firm NSO Group. The uncovered information was the result of a cross-border journalistic investigation into government use of NSO Group’s spyware dubbed the "Pegasus Project". The initiative is coordinated by the French non-profit organization Forbidden Stories and brings together various media outlets from all over the world.

Both Polish individuals found to have been targeted with Pegasus have close ties to opposition senator Krzysztof Brejza. Magdalena Łośko (the senator’s former assistant) and Ryszard Brejza (his father and mayor of Inowrocław) have received text messages used to infect their phones with Pegasus. They contained links leading to websites disguised as pages of popular brands such as Play, Energa, CCC, or Bytom. Moreover, the data obtained by Pegasus Project, to which we had access, suggests that the infected SMS messages were sent to Ms. Łośko and Mr. Brejza's phones shortly after they were selected as targets by a Polish client of NSO Group- the Israeli technology company offering Pegasus spyware. The only Polish government agency that uses this system is the Central Anticorruption Bureau (CBA).

The content of their mobile devices was examined by Amnesty International Security Lab, the organization's cybersecurity division, which published a list of 14 messages identified as having been used to infect phones with Pegasus.

We are publishing the translated text messages below.

Małgorzata Łośko: 

2019-04-17 12:42:55 Club51015: Shopping with the 5.10.15 club! Seasonal sale -50% online and in stores. Check out: https://sale-2019[.]com/2CaJGuQ

2019-04-18 14:13:26 StoresCCC: Up to 50% discounts on footwear, and for club members an extra 10% off all products! Offer valid until 20-04-2019 Check out online!  http://bit[.]ly/lPl1jEU

2019-04-19 10:40:51 Playpl: Download invoice no: F/20087153/04/19 for the amount of 125.00 PLN. Due date 2019/04/26. Log in online

2019-04-23 07:12:47 Infor: Workplace bullying is more common than you’d expect. Read more:

Ryszard Brejza:

2019-07-11 12:15:35 GatewaySMS: Mr. President, have you seen the comments on the "ino" portal about the mowed field? Please go and read it. Here is a link to the article: http://tinyurl[.]com/y69p3pyk (https://newsportal24[.]online/mtM8dy6cz)

2019-07-12 07:18:19 PlatformaKO: Let's meet on July 12-13 at the Civic Coalition Agenda Forum to talk about Poland! http://tinyurl[.]com/y3cnsgzl (https://loginverify[.]net/EWSRfbj)

2019-07-12 16:23:51 HTC-Poland: Subscribe to the HTC club! As a club member, you will receive information about new products, accessories and services not available to others. Get the most out of your phone! https://oneadjump[.]com/SQY8jBX

2019-07-16 08:38:32 WCZK-A1: AmberGO - a new payment system on the A1 freeway! Automatic toll collection system without tickets and without paying at the gates. https://loginverify[.]net/6Egzh2F Try it out now!

2019-07-24 06:56:35 The drug crisis continues! Find out which pharmacy in your area will have the medicine you need! https://sale-2019[.]com/8QCAqcU8

2019-07-29 12:23:42 Energa: Dear customer, we remind you about the deadline for submitting statements on the energy price freeze. You can find full information about your eligibility for billing at lower prices and rates on our website: https://loginverify[.]net/sj5zsue

2019-07-31 13:24:43 GatewaySMS: Ryszard vote for our Senate candidate. This is the last moment!  https://newsportal24[.]online/kcUU9pshh

2019-08-06 12:05:56 e-nadmorzem: Hotels on the Baltic Coast up to 50% off. Check out the offer. https://holiday-sun[.]net/eXppP19S

2019-08-14 11:53:11 Bytom: Good morning, we would like to inform you that your package is available for pickup at the Bytom showroom C.H. Złote Tarasy. Please have your order number ready. Go to your order: https://awizo[.]info/7AvsrqNYR

2019-08-20 12:06:19 newsportal: We already have the full electoral lists! We are waiting for some interesting battles. See the full list of candidates from your constituency https://newsportal24[.]online/8ZedQvG


Every day, 400 journalists at Gazeta Wyborcza write verified, fact-checked stories about Polish politics and society, keeping a critical eye on the ruling camp’s persistent assault on democratic values and the rule of law; the growing cultural tension between religious fundamentalism and human rights; and the ongoing COVID-19 epidemic. Our journalists are on the front lines in 25 Polish cities, reporting from the streets, hospitals, and courtrooms about issues that move public opinion.

We decided to make our service available to everyone free of charge in order to provide access to high quality journalism for expats and English speakers interested in Polish affairs. 

The access to information should be equal for all.

Gazeta Wyborcza Foundation
Czytaj ten tekst i setki innych dzięki prenumeracie
Wybierz prenumeratę, by czytać to, co Cię ciekawi to zawsze sprawdzone informacje, szczere wywiady, zaskakujące reportaże i porady ekspertów w sprawach, którymi żyjemy na co dzień. Do tego magazyny o książkach, historii i teksty z mediów europejskich.
Więcej na ten temat
Zaloguj się
Chcesz dołączyć do dyskusji? Zostań naszym prenumeratorem