Hacker News Reader

Has to be one of the three "they are directly included in the chat, are sent copies from a participant or have access to a member’s unlocked phone"

option four, they used pegasus or similar to takeover the device with a 0 or 1-click installing memory resident malware

That's exactly the same as option three.

With zero-click exploits you do not need access to the phone and it does not need to be unlocked.

Without the phone being locked even in AFU state you get rather limited access.

> With zero-click exploits you do not need access to the phone

The whole point of the exploit is that you get access to the phone.