Civil society organizations and journalists have been at the forefront for disclosing the misuse of surveillance spyware globally. Whilst investigations of such misuse should have been the responsibility of authorities, they have frequently been obstructive, including in the context of parliamentary inquiries. Ground-breaking work by CitizenLab and the Amnesty Tech has been integral to proving infections by technical means. Amnesty International and Forbidden Stories, a network of journalists, discovered the systematic misuse of surveillance capabilities from a dataset including about 50,000 phone numbers. Their analysis called the “Pegasus Project” was released in June 2021 and encompassed revelations about the most popular surveillance tool Pegasus, developed by the company NSO Group.