'Pegasus' spyware ignites privacy debate