Around the globe, journalists, human rights activists, scholars and others are facing digital attacks from Pegasus, military-grade spyware originally developed to go after criminals. Some of the people targeted have been killed or are in prison.

In this episode, Reveal partners with the Shoot the Messenger podcast to investigate one of the biggest Pegasus hacks ever uncovered: the targeting of El Faro newspaper in El Salvador.

In the opening story, hosts Rose Reid and Nando Vila speak with El Faro co-founder Carlos Dada and reporter Julia Gavarrete. El Faro has been lauded for its investigations into government corruption and gang violence. The newspaper is no stranger to threats and intimidation, which have increased under the administration of President Nayib Bukele.

Reid and Vila also speak with John Scott-Railton of Citizen Lab, a Toronto-based digital watchdog group. Scott-Railton worked to identify the El Faro breach, and it was one of the most obsessive cases of spying Citizen Lab has ever seen.

Over the course of one year, 22 members of the newspaper’s staff had their phones infected with Pegasus and were surveilled by a remote operator. Researchers suspect Bukele’s government was behind the spying, though officials have denied those allegations. The breach forced El Faro’s journalists to change the way they work and live and take extreme measures to protect sources and themselves. 

Then Reid talks with Reveal’s Al Letson about growing efforts to hold the NSO Group, the company behind Pegasus, accountable for the massive digital attacks.