Digital forensic evidence points to the phone's massive, months-long data egress having likely been triggered by Pegasus mobile spyware.