Colombian President Gustavo Petro has recently stirred controversy by claiming the notorious Israeli spyware Pegasus was purchased during former President Iván Duque’s administration. 

In a national address, Petro alleged that a $5.5mn payment was made in 2021 as part of a larger $11mn agreement between the NSO Group, the Israeli software developer, and the Colombian police’s intelligence division (Dipol). He hinted that the spyware might have been used illegally to target his political campaign and key figures during Colombia's 2021 social unrest.

The President’s allegations were based on a report from the Colombian Financial Information and Analysis Unit (UIAF), which had requested intelligence from its Swiss counterpart. However, no solid evidence has yet surfaced to prove the presence or use of Pegasus in the country. Despite the seriousness of the accusations, Petro failed to provide concrete proof during his televised address, raising questions about the claims' credibility.

Opposition figures have criticised the timing of the allegations, suggesting it may serve as a distraction from other political issues, including investigations into potential overspending during Petro’s 2022 presidential campaign. Former officials from Duque's administration, including Victor Manuel Muñoz, dismissed the claims as "false and unfounded."

In response, Colombia’s Ministry of Defence and the Directorate of National Intelligence have denied any record of Pegasus within their arsenals. The Colombian Prosecutor’s Office has opened an investigation into whether the spyware entered the country through private channels, potentially involving state agents, specifically the police.

Experts, such as cybersecurity specialist Yefrin Garavito, note that intelligence technologies like Pegasus are typically purchased by governments for legitimate security purposes, such as counter-terrorism efforts. However, Garavito also highlighted the unusual nature of the alleged cash transaction, raising further suspicions about the deal's legality. For Pegasus to be lawfully deployed, judicial approval is required for any communications interception. However, concerns have been raised in Colombia’s history about illegal wiretapping operations disguised as legal intelligence activities.

While NSO Group did not confirm or deny the sale of Pegasus to Colombia, it reiterated that its technology is sold exclusively to law enforcement and intelligence agencies, following all regulations. The controversy mirrors international concerns about the misuse of Pegasus, particularly in countries where it has been linked to political espionage.

Last week, an MP from the Slovakian opposition claimed that the Slovak Information Service (SIS) had purchased Pegasus, an accusation denied by the Ministry of Interior. In recent years, the spyware was reportedly acquired by the governments of Hungary and Poland and allegedly used to spy on opponents.