Colombian President Gustavo Petro has ordered an investigation into the purchase of Pegasus spy software by the country’s police force.

President Petro said the spyware was bought – in cash – from an Israeli surveillance firm during the government of his predecessor, Iván Duque.

He added that the software, which can be installed remotely on mobile phones to access people’s microphones and cameras, may have been used to spy on political rivals, including himself.

The president’s remarks were the first official confirmation that Colombia was among the countries which bought the phone malware.

Pegasus software infects iPhones and Android devices to enable operators to extract messages, photos and emails, record calls and secretly activate microphones and cameras.

Mr Petro revealed the news in a televised address to the nation, saying that he had learned of the purchase through a confidential document.

The president said that Colombia’s police intelligence directorate (Dipol) had made two payments of $5.5m (£4.2m) each to Israeli surveillance firm NSO, which had developed the spyware.

NSO has said in the past that its software is intended for use against criminals and terrorists and is made available only to military, law enforcement and intelligence agencies from countries with good human rights records.

But Mr Petro queried how $11m in cash could have left the country without any trace of it being recorded in the published budget – and why.

“It is a laundering of assets made from our own state to disrupt the communications of whom?” he asked.

Pegasus spyware hit the headlines in 2021 when a list of 50,000 phone numbers of suspected victims of hacking was leaked to major media outlets.

Among those believed to have been targeted were activists, journalists and politicians from around the world.

President Petro urged the attorney-general’s office to investigate the purchase and what police may have used the spyware for.

He also demanded that the head of Colombia’s police force hand over all relevant documents related to Pegasus.

It is not the first time the Colombian security forces have been accused of illegally intercepting communication.

Wiretapping scandals have rocked the country repeatedly over the past two decades, leading to the closure of its intelligence agency, the Department of Administrative Services (DAS), in 2011.