Human rights lawyer, activist both receive SMS messages containing malicious links through Pegasus software, whose developer, NSO Group, says it only sells to government agencies