(New?) capabilities alleged in this article. Includes deploying by phone number, and phone working to collect information even when supposedly powered off
https://www.cbc.ca/news/canada/rcmp-spyware-mcnamara-merrifield-1.7500360
Sadly these aren’t new capabilities. Feigning being powered off is an old trick, and many mercenary spyware vendors target via phone number.
Unfortunately this story contains very few specifics. We don’t know what kind of phones the targets used, software update status, etc.
But what is described is consistent with Pegasus-like capabilities. What we do know is that if you use an iPhone, lockdown mode has been successful in blocking attacks. GrapheneOS is probably also very resistant as well but I’m unaware of any real world examples.