Thailand must thoroughly investigate the use of the invasive Pegasus spyware found on the phones of dozens of activists, Amnesty International (AI) said in a statement yesterday.
The rights group issued the statement after a report identified 30 people affected by the software, the first time its use in the country has been confirmed through technical analysis.
"Thai authorities must launch an independent, prompt, thorough, and effective investigation into the use of Pegasus spyware and take necessary measures to foster a safe environment for civic engagement," AI said. The joint report by the Thai NGO iLaw, Digital Reach and Citizen Lab found that the Pegasus spyware infections spanned 2020 to 2021.
Those targeted included prominent individuals leading mass pro-democracy protests, which called for major political and economic reforms, as well as academics and human rights defenders who have publicly criticised the Thai government, the report said.
These findings stemmed from alarming notifications sent by Apple to many Thai activists that they had been targeted with the spyware in November 2021.
AI's security lab has independently confirmed five cases in the report through forensic analysis.
"We can now officially add Thailand to the growing list of countries where people peacefully calling for change, expressing an opinion, or discussing government policies may trigger invasive surveillance with a profound toll on an individual's freedom of expression, privacy, and sense of security," said Etienne Maynier, a technologist with AI.
Pegasus spyware was found on the phones of leading Thai protest organisers, including Arnon Nampa, Benja Apan and Panusaya Sithijirawattanakul who authorities have targeted with criminal proceedings for peacefully exercising their rights to assembly and freedom of expression.
NSO Group, the Israeli cyber-arms company behind Pegasus, claims that it only sells products to government intelligence and law enforcement agencies.
Newin Chorchaithip, the Digital Economy and Society vice minister, said he was unaware of the report that spyware targeted dissidents. He said the spyware it is too complicated to use against a small focused group of people. It usually hit targets engaged in activities susceptible to security vulnerability first, he added.