Sources: how a 2019 NSO deal to sell Pegasus to Uganda, followed by an unknown actor using Pegasus to try to hack the US embassy in Uganda, led to NSO