Self-scans reveal that Pegasus, an invasive and powerful spyware that can secretly control phones and track owners, might be more widespread than previously thought. It was discovered on the phones of everyday phone users.
From wikiHow: How to Check Your Smartphone for Pegasus Spyware
That’s outdated stuff. Pegasus doesn’t need phishing methods to get on your phone. It just installs itself when an actor sends it your way. You won’t notice it and the only way to prevent it is to not use a phone.
It technically uses various zero-day zero-click exploits to get there. Which is why it functions like a service - they need to maintain relevance of those exploits. Imagine, a whole service of clearly illegal activity, which doesn’t get absolutely destroyed simply because it’s useful to spy on dissidents.