This article from Amnesty International's Security Lab is a good primer on the attack vector used by the Pegasus exploit

https://www.amnesty.org/en/latest/research/2021/07/forensic-...