not only #pegasus, also #candiru
…"Candiru … sells spyware exclusively to governments."
…"We identified a politically active victim in Western Europe and recovered a copy of Candiru’s Windows spyware."
…"resulting in the discovery of CVE-2021-31979 and CVE-2021-33771"
…"victims in Palestine, Israel, Iran, Lebanon, Yemen, Spain, United Kingdom, Turkey, Armenia, and Singapore. Victims include human rights defenders, dissidents, journalists, activists, and politicians."
https://citizenlab.ca/2021/07/hooking-candiru-another-mercenary-spyware-vendor-comes-into-focus/