In July 2022 the civil society organizations iLaw, DigitalReach, and Citizen Lab released a collaborative investigation revealing that between October 2020 to November 2021 more than 30 Thai activists and protesters, predominantly key figures in the pro-democracy movement, were targeted by NSO Group's spyware Pegasus. Among the conclusions from the investigation, Thai dissidents may have been targeted for three reasons: to monitor their online activities; to monitor the protests; and to seek information regarding the protests’ funding sources.

The Washington Post invited NSO Group to comment on its business in Thailand, and on the occasion, the company provided a short statement against the verifiability of the claims against NSO.