WhatsApp Files Contempt Against NSO Group for New Spyware Attacks

WhatsApp has filed a federal court contempt order against NSO Group for allegedly violating a permanent injunction that prohibits the spyware firm from targeting its users. The Meta-owned messaging platform disrupted new spear phishing attempts linked to NSO, which involved tricking users into clicking malicious links that redirected them to external websites. WhatsApp identified and dismantled test accounts created by NSO on its platform. The attacks are reminiscent of previous phishing campaigns associated with NSO's Pegasus spyware. The recent campaign reportedly targeted fewer than 10 users, primarily in Jordan and Lebanon, but no signs of compromise were detected among them. WhatsApp has publicly disclosed malicious domains related to the phishing attempts to aid users and security researchers. The ongoing legal battle follows a 2025 court ruling that found NSO liable for hacking over 1,400 WhatsApp users, resulting in a reduced damages award from $167 million to $4 million. The case highlights the persistent threat posed by commercial spyware firms.

Key Points: • WhatsApp has filed a contempt order against NSO Group for violating a court injunction. • The recent phishing campaign targeted fewer than 10 users, primarily in Jordan and Lebanon. • WhatsApp has shared malicious domains linked to the attacks to assist users and researchers.