Here's what we know about NSO's Pegasus spyware