Pegasus phone-hacking software made by Israeli firm was potentially used on over 1,000 Indian numbers