Signal is working on a way to sign up without a phone number. The feature has not yet been officially confirmed, and it is not yet known whether it will be available to all users or in what form.
While the capabilities of Pegasus may vary over time due to software updates, Pegasus is generally capable of reading text messages, call snooping, collecting passwords, location tracking, accessing the target device’s microphone and camera, and harvesting information from apps.
Once installed, Pegasus has been reported to be able to run arbitrary code, extract contacts, call logs, messages, photos, web browsing history, settings, as well as gather information from apps including but not limited to communications apps iMessage, Gmail, Viber, Facebook, WhatsApp, Telegram, and Skype.
https://en.wikipedia.org/wiki/Pegasus_(spyware)