WhatsApp accuses Israeli spyware NSO Group’s Pegasus of targeting users again

WhatsApp Accuses Israeli Spyware Firm NSO Group of Targeting Users in Jordan and Lebanon

WhatsApp accuses Israeli spyware NSO Group – WhatsApp has formally accused the Israeli spyware company NSO Group of continuing to target its users through the Pegasus surveillance platform, a move that underscores ongoing concerns about the firm’s compliance with a prior court order. The focus keyword, “WhatsApp accuses Israeli spyware NSO Group,” is central to this latest legal action, which aims to hold the company accountable for alleged breaches of a 2023 directive. Meta, the parent company of WhatsApp, has filed a contempt petition in a U.S. federal court, asserting that NSO Group violated its restrictions by deploying Pegasus to infiltrate user accounts via targeted spear-phishing attacks. This accusation comes as part of a broader effort to enforce stricter oversight of the spyware firm’s activities within the WhatsApp ecosystem.

NSO Group’s Recent Surveillance Tactics

Recent investigations have uncovered a covert campaign attributed to NSO Group’s Pegasus spyware, which allegedly compromised the security of WhatsApp users in Jordan and Lebanon. The attack vectors included malicious links embedded in messages, which redirected users to external domains. These links were strategically crafted to mimic legitimate websites, including one that impersonated France 24, a French state-owned media outlet. While the scope of the breach was limited to fewer than 10 users, the implications of such targeted surveillance are significant, particularly given the potential for Pegasus to access sensitive communications without user consent.

Meta has confirmed that the breach involved users in both Jordan and Lebanon, though the identities of the affected individuals have not been disclosed. The company’s legal team argues that these attacks exemplify NSO Group’s pattern of using Pegasus to monitor high-profile targets, such as journalists, activists, and political figures. The breach follows a series of similar incidents, with researchers linking the spyware to attacks in Mexico and the Middle East, where it has been used to surveil critics of governments. This trend has intensified scrutiny of NSO Group’s practices and raised questions about the adequacy of its compliance measures.

Legal and Regulatory Context

The contempt motion filed by Meta builds on an existing federal injunction that prohibits NSO Group from accessing WhatsApp systems or targeting its users. This order was enforced after a 2023 jury ruled that NSO Group had violated WhatsApp’s privacy protections by using Pegasus to infiltrate around 1,400 accounts in 2019. The initial damages awarded to Meta were $167 million, but they were later reduced to $4 million. Despite this settlement, the firm continues to face legal challenges, with Meta now pushing for renewed restrictions to prevent further breaches.

NSO Group’s defense centers on its claim that Pegasus is a tool for lawful government surveillance, designed to combat crime and terrorism. The company asserts that its clients, including intelligence agencies from various countries, operate within legal frameworks to monitor individuals deemed threats to national security. However, independent analyses have shown that Pegasus has been used to track journalists and activists in Mexico, where it was implicated in a campaign targeting over 1,400 users. These findings challenge NSO Group’s narrative, highlighting the dual use of its technology for both security and suppression purposes.

Implications for U.S.-Israel Relations

The Biden administration’s designation of NSO Group as a “foreign adversary” on the U.S. Entity List in 2021 has intensified pressure on the company to comply with American regulations. This move restricted U.S. businesses from providing technology or services to NSO Group, citing risks to national security and human rights. Despite attempts to remove the designation, the firm has not succeeded, with Meta supporting the decision as a necessary step to curb its surveillance activities.

NSO Group’s ongoing defiance of court orders has drawn criticism from legal experts and advocacy groups, who argue that the firm’s actions threaten digital privacy worldwide. The recent contempt petition adds to a growing list of legal actions against NSO, including a 2020 case in Spain where the company was accused of hacking journalists and activists. With the Pegasus spyware continuing to be deployed, the case serves as a critical test of how global digital security is enforced and the role of U.S. law in holding foreign entities accountable.

Meta’s legal filing emphasizes the importance of maintaining the injunction, stating, “When a malicious company on the U.S. entity list defies judicial rulings, existing restrictions must stay in place.” The company has also called for transparency, urging NSO Group to disclose the specific government clients involved in the latest campaign. As the legal battle continues, the outcome could set a precedent for how digital surveillance is regulated in the future, particularly in the context of international partnerships and cybersecurity compliance.